TI-2015-01293 CVE-2015-1425 · GHSA-hj2v-r6vv-m6mj
JAKWEB Gecko CMS has Multiple Input Validation Vulnerabilities
Priority MEDIUM 45
JAKWEB Gecko CMS has Multiple Input Validation Vulnerabilities
Jakweb
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Jakweb records in CISA KEVNo Jakweb vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2015-01292 CVE-2015-1424 · GHSA-587g-qp7x-ww69
Cross-site request forgery (CSRF) vulnerability in Gecko CMS 2.2 and 2.3 allows remote…
Priority LOW 35
Cross-site request forgery (CSRF) vulnerability in Gecko CMS 2.2 and 2.3 allows remote attackers to hijack the authentication of administrators for requests that add an administrator user via a newuser request to admin/i…
TI-2015-01291 CVE-2015-1423 · GHSA-r6m2-74p6-hm2h
Multiple SQL injection vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote…
Priority LOW 32
Multiple SQL injection vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote administrators to execute arbitrary SQL commands via the (1) jak_delete_log[] or (2) ssp parameter to admin/index.php.
TI-2015-01290 CVE-2015-1422 · GHSA-9vqf-7ph9-8wvj
Multiple cross-site scripting (XSS) vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote…
Priority LOW 27
Multiple cross-site scripting (XSS) vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) horder[], (2) jak_catid, (3) jak_content, (4) jak_css, (5) jak_delete…