Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Native-php-cms Project records in CISA KEVNo Native-php-cms Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 70
A vulnerability, which was classified as critical, was found in Fanli2012 native-php-cms 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00657 · Published 2025-01-15 · No fix listed CWE-1392
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in Fanli2012 native-php-cms 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00606 · Published 2025-01-15 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability classified as critical was found in Fanli2012 native-php-cms 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00474 · Published 2025-01-15 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability classified as critical has been found in Fanli2012 native-php-cms 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00474 · Published 2025-01-15 · No fix listed CWE-74
Priority MEDIUM 50
SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00855 · Published 2023-02-03 · No fix listed CWE-89
Priority LOW 24
A vulnerability has been found in Fanli2012 native-php-cms 1.0 and classified as problematic.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0034 · Published 2025-01-15 · No fix listed CWE-79
Open these records in search →