Umi-cms

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Umi-cms records in CISA KEV

No Umi-cms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Umi.cms 1 record LOW Umi Cms 1 record LOW

Records

2 records

TI-2013-02410 CVE-2013-2754 · GHSA-9v5g-g53w-f4xg

Cross-site request forgery (CSRF) vulnerability in Umisoft UMI.CMS before 2.9 build 21905…

LOW 34

Cross-site request forgery (CSRF) vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a request…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02278 Published 2014-03-11 No fix listed CWE-352

TI-2007-05214 CVE-2007-5428 · GHSA-pxrq-c3v9-mhjh

Cross-site scripting (XSS) vulnerability in UMI CMS allows remote attackers to inject…

LOW 23

Cross-site scripting (XSS) vulnerability in UMI CMS allows remote attackers to inject arbitrary web script or HTML via the search_string parameter to the default URI in search_do/.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01511 Published 2007-10-12 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0