Lucidcms

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Lucidcms records in CISA KEV

No Lucidcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lucidcms 4 records LOW

Records

4 records

TI-2005-02958 CVE-2005-3130 · GHSA-3qgv-5387-gfm7

SQL injection vulnerability in lucidCMS 1.0.11 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in lucidCMS 1.0.11 allows remote attackers to execute arbitrary SQL commands via the login field.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0115 Published 2005-10-04 No fix listed

TI-2006-01582 CVE-2006-1635 · GHSA-q66f-j5hm-434h

LucidCMS 2.0.0 RC4 allows remote attackers to obtain sensitive information via a direct…

LOW 25

LucidCMS 2.0.0 RC4 allows remote attackers to obtain sensitive information via a direct request to /lucid_phplib/translator.php, which reveals the path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01306 Published 2006-04-06 No fix listed

TI-2005-02955 CVE-2005-3127 · GHSA-q3hx-935w-hrg2

Cross-site scripting (XSS) vulnerability in index.php in lucidCMS 1.0.11 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in index.php in lucidCMS 1.0.11 allows remote attackers to inject arbitrary web script or HTML via the query string.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01752 Published 2005-10-04 No fix listed

TI-2006-01581 CVE-2006-1634 · GHSA-68h4-6vqw-528g

Cross-site scripting (XSS) vulnerability in index.php in LucidCMS 2.0.0 RC4 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in LucidCMS 2.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the command parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01717 Published 2006-04-06 No fix listed

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0