Itcms

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Itcms records in CISA KEV

No Itcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Itcms 2 records MEDIUM Vigile Cms 1 record LOW

Records

2 records in Itcms · all components

TI-2008-02104 CVE-2008-2192 · GHSA-rpp4-2q2j-fc26

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9…

MEDIUM 49

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03744 Published 2008-05-14 No fix listed CWE-94

TI-2007-03983 CVE-2007-4115 · GHSA-gjwr-v3q3-r53h

Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary web script or HTML via the wndtitle parameter to (1) lang-en.php, (2) menu-ed.php, or (3) titletext-ed.…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02383 Published 2007-07-31 No fix listed

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0