Mihalism

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Mihalism records in CISA KEV

No Mihalism vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Multi Host 3 records MEDIUM

Records

3 records in Multi Host · all components

TI-2007-06353 CVE-2007-6657 · GHSA-q4m3-6ww5-pqp6

PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism…

MEDIUM 42

PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfh_root_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06028 Published 2008-01-04 No fix listed CWE-94

TI-2008-00680 CVE-2008-0714 · GHSA-rpvq-484q-f5wg

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers…

LOW 32

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lost_password_go action.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00949 Published 2008-02-12 No fix listed CWE-89

TI-2007-06349 CVE-2007-6653 · GHSA-cg49-hwxp-pxwc

Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows…

LOW 27

Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02263 Published 2008-01-04 No fix listed CWE-22

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0