Reamday Enterprises

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Reamday Enterprises records in CISA KEV

No Reamday Enterprises vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Magic News Plus 3 records MEDIUM Magic News Lite 2 records LOW Magic Calendar Lite 1 record LOW Magic Downloads 1 record LOW Magic News Pro 1 record MEDIUM

Records

3 records in Magic News Plus · all components

TI-2007-01108 CVE-2007-1141 · GHSA-p7rc-h4j2-q995

PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows…

MEDIUM 42

PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the php_script_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05795 Published 2007-02-27 No fix listed CWE-94

TI-2006-00150 CVE-2006-0157 · GHSA-wq5c-pwf7-5526

settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to…

LOW 27

settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies identical values for the passwd and admin_password parameters, the…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02279 Published 2006-01-10 No fix listed

TI-2007-01109 CVE-2007-1142 · GHSA-8m6g-m8hh-52wp

Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers…

LOW 23

Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the link_parameters parameter in (1) news.php and (2) n_layouts.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01602 Published 2007-02-27 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	2
Low	3
No CVSS	0