Skyarc

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Skyarc records in CISA KEV

No Skyarc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Autotagging 2 records LOW Duplicateentry 2 records LOW Mailpack 2 records LOW Mtcms 2 records LOW Multifileuploader 2 records LOW Mtcms Wysiwyg Editor 1 record LOW

Records

3 records

TI-2011-03534 CVE-2011-3994 · GHSA-w3rg-mp26-54rp

Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the…

LOW 31

Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugi…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00586 Published 2011-11-03 No fix listed CWE-352

TI-2011-03533 CVE-2011-3993 · GHSA-rrj5-x37f-2q48

SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2…

LOW 27

SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, uses weak permissions, which a…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01117 Published 2011-11-03 No fix listed CWE-264

TI-2008-06138 CVE-2008-6448 · GHSA-cvxr-5856-5xwh

Cross-site scripting (XSS) vulnerability in install.cgi in SKYARC System MTCMS WYSIWYG…

LOW 22

Cross-site scripting (XSS) vulnerability in install.cgi in SKYARC System MTCMS WYSIWYG Editor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2009-03-09 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0