Skybluecanvas

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Skybluecanvas records in CISA KEV

No Skybluecanvas vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Skybluecanvas 4 records MEDIUM

Records

4 records

TI-2014-01299 CVE-2014-1683 · GHSA-v2h5-46c5-j7mf

The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in…

MEDIUM 54

The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248-04, when the pid parameter is 4, allows remote attackers to execute arbitrary commands via shell me…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.31415 Published 2014-01-29 No fix listed CWE-134

TI-2009-02022 CVE-2009-2115 · GHSA-ppv9-mhh3-6g69

admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain…

LOW 32

admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain sensitive information via an invalid id parameter, which reveals the installation path in an error message.

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.01127 Published 2009-06-18 No fix listed CWE-200

TI-2009-02023 CVE-2009-2116 · GHSA-36gv-vcm7-9gf5

Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote…

LOW 23

Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to list directory contents via a ..

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02386 Published 2009-06-18 No fix listed CWE-22

TI-2009-02021 CVE-2009-2114 · GHSA-pwhc-6vjg-8jh2

Multiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1 r237 allow remote attackers to inject arbitrary web script or HTML via the (1) mgroup, (2) mgr, (3) objtype, (4) id, and (5) dir param…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01497 Published 2009-06-18 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	4
Low	0
No CVSS	0