Onethird

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Onethird records in CISA KEV

No Onethird vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Onethird Cms 2 records LOW Onethird 1 record MEDIUM

Records

3 records

TI-2020-04607 CVE-2020-5640 · GHSA-p2v2-j3qq-4r65

Local file inclusion vulnerability in OneThird CMS v1.96c and earlier allows a remote…

MEDIUM 47

Local file inclusion vulnerability in OneThird CMS v1.96c and earlier allows a remote unauthenticated attacker to execute arbitrary code or obtain sensitive information via unspecified vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02484 Published 2020-10-20 No fix listed

TI-2017-01428 CVE-2017-2124 · GHSA-h4gx-6x2p-3vvh

Cross-site scripting in SpiQe Software OneThird CMS

LOW 30

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01146 Published 2017-04-28 No fix listed CWE-79

TI-2017-01427 CVE-2017-2123 · GHSA-cvj5-vv5v-wm45

Cross-site scripting in SpiQe Software OneThird CMS

LOW 30

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01195 Published 2017-04-28 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0