Pragyan Cms Project

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Pragyan Cms Project records in CISA KEV

No Pragyan Cms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pragyan Cms 6 records MEDIUM

Records

6 records in Pragyan Cms · all components

TI-2015-03871 CVE-2015-4627 · GHSA-cpgx-hh5x-592f

SQL injection vulnerability in Pragyan CMS 3.0.

MEDIUM 44

SQL injection vulnerability in Pragyan CMS 3.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01035 Published 2017-09-07 No fix listed CWE-89

TI-2015-01332 CVE-2015-1471 · GHSA-7c84-xmm4-5pcv

SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote…

LOW 39

SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03798 Published 2015-02-12 No fix listed CWE-89

TI-2009-01401 CVE-2009-1480 · GHSA-jpjh-g42v-5698

SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands via the fileget parameter in a view action and other unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00987 Published 2009-04-29 No fix listed CWE-89

TI-2012-05218 CVE-2012-6500 · GHSA-2q9m-7rqw-8rxq

Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier…

LOW 29

Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03393 Published 2013-01-12 No fix listed CWE-22

TI-2017-10700 CVE-2017-14601 · GHSA-288h-4m8f-x8cf

Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via…

LOW 25

Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $_GET['forwhat'], resulting in Information Disclosure.

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.01178 Published 2017-09-19 No fix listed CWE-89

TI-2017-10699 CVE-2017-14600 · GHSA-65x9-gfr2-g7hv

Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via…

LOW 25

Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $_GET['del_black'], resulting in Information Disclosure.

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.01178 Published 2017-09-19 No fix listed CWE-89

Open these records in search →

Critical	1
High	2
Medium	3
Low	0
No CVSS	0