Skyss

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Skyss records in CISA KEV

No Skyss vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Arfa-cms 2 records MEDIUM

Records

2 records in Arfa-cms · all components

TI-2024-30340 CVE-2024-45265 · GHSA-3g58-rjqp-pmgh

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124…

MEDIUM 51

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to execute arbitrary SQL commands via the psid parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01045 Published 2024-08-26 No fix listed CWE-79

TI-2024-30339 CVE-2024-45264 · GHSA-7cfc-62qm-phmg

A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem…

MEDIUM 41

A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to add a new administrator, leading to escalation of privileges.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00507 Published 2024-08-27 No fix listed CWE-352

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0