Profilecms

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Profilecms records in CISA KEV

No Profilecms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Profilecms 2 records LOW

Records

2 records in Profilecms · all components

TI-2007-05792 CVE-2007-6058 · GHSA-c3j6-m7f6-92cp

Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow…

LOW 35

Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) codes action in the profile-codes module, (2) video…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01229 Published 2007-11-20 No fix listed CWE-89

TI-2007-05493 CVE-2007-5720 · GHSA-2jhx-jvpp-rf85

Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows…

LOW 34

Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors involving creation of a profile.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01962 Published 2007-10-30 No fix listed CWE-94

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0