Slimcms

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Slimcms records in CISA KEV

No Slimcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Slimcms 2 records LOW

Records

2 records in Slimcms · all components

TI-2008-05416 CVE-2008-5708 · GHSA-wvvf-rpmq-rjj7

redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote…

LOW 38

redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02643 Published 2008-12-24 No fix listed CWE-287

TI-2008-05208 CVE-2008-5491 · GHSA-gg4r-8pwc-qhvm

SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote…

LOW 35

SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pageID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-12-12 No fix listed CWE-89

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0