Phpcms

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Phpcms records in CISA KEV

No Phpcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpcms 15 records MEDIUM Phpcms 2008 2 records LOW Guesbook Module 1 record LOW

Records

2 records in Phpcms 2008 · all components

TI-2011-00562 CVE-2011-0645 · GHSA-3qxq-5jcx-g5cg

SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to…

LOW 35

SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the where_time parameter in a get action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2011-01-25 No fix listed CWE-89

TI-2011-00561 CVE-2011-0644 · GHSA-5m78-jr6f-rgf5

SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2…

LOW 35

SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the modelid parameter to flash_upload.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01165 Published 2011-01-25 No fix listed CWE-89

Open these records in search →

Critical	3
High	6
Medium	9
Low	0
No CVSS	0