Read the docs

Sinecms

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Sinecms records in CISA KEV

No Sinecms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sinecms 4 records LOW

Records

4 records in Sinecms · all components

TI-2008-06851 CVE-2008-7163 · GHSA-fq8j-6x8v-75hr

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and…

Priority LOW 37

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the sine[config][ind…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04082 Published 2009-09-04 No fix listed CWE-22
TI-2007-06073 CVE-2007-6366 · GHSA-p7hv-pp4c-qp77

Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote…

Priority LOW 37

Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to mods/Calendar/index.php, accessed through a Calendar info action to…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02356 Published 2007-12-15 No fix listed CWE-89
TI-2007-06074 CVE-2007-6367 · GHSA-3vg2-5h9w-8928

Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and…

Priority LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username (user) or (2) comment (commento) field,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04255 Published 2007-12-15 No fix listed CWE-79
Open these records in search →