Lokicms

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Lokicms records in CISA KEV

No Lokicms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lokicms 5 records MEDIUM

Records

5 records

TI-2008-01787 CVE-2008-1860 · GHSA-58rh-xrx9-j32v

Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows…

MEDIUM 46

Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitrary PHP code into includes/Config.php via the default parameter.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03048 Published 2008-04-17 No fix listed CWE-94

TI-2008-04445 CVE-2008-4662 · GHSA-g9wg-pff2-mcx7

Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magic_quotes_gpc is…

LOW 35

Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02436 Published 2008-10-21 No fix listed CWE-22

TI-2008-05661 CVE-2008-5965 · GHSA-xjfw-6qv5-vrwm

Directory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when…

LOW 32

Directory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to check for the existence of arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06418 Published 2009-01-26 No fix listed CWE-22

TI-2008-04670 CVE-2008-4913 · GHSA-7rjh-8h85-p8v6

Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote…

LOW 28

Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to delete arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02686 Published 2008-11-04 No fix listed CWE-22

TI-2008-06332 CVE-2008-6643 · GHSA-7jx3-hfqx-539h

LokiCMS 0.3.4 and possibly earlier versions does not properly restrict access to…

LOW 27

LokiCMS 0.3.4 and possibly earlier versions does not properly restrict access to administrative functions, which allows remote attackers to bypass intended restrictions and modify configuration settings via the LokiACTIO…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02406 Published 2009-04-07 No fix listed CWE-264

Open these records in search →

Critical	1
High	0
Medium	4
Low	0
No CVSS	0