Read the docs

Vivaprograms

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Vivaprograms records in CISA KEV

No Vivaprograms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Infinity Script 1 record LOW

Records

1 record

TI-2009-03746 CVE-2009-3949 · GHSA-7gwx-3v53-xrjm

cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative…

Priority LOW 37

cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewauthor action, which allows remote attackers to create administrative accounts via the name, password,…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02199 Published 2009-11-16 No fix listed CWE-264
Open these records in search →