Xcms

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Xcms records in CISA KEV

No Xcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xcms 3 records MEDIUM

Records

3 records

TI-2007-06348 CVE-2007-6652 · GHSA-cf9h-mc58-gqvq

cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit…

MEDIUM 40

cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection attacks and execute arbitrary code via the testo_0 parameter…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04154 Published 2008-01-04 No fix listed CWE-94

TI-2007-06300 CVE-2007-6604 · GHSA-777g-xq74-4w6p

Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow…

LOW 29

Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03624 Published 2007-12-31 No fix listed CWE-22

TI-2007-04877 CVE-2007-5060 · GHSA-7qh9-92w2-gfw9

Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin…

LOW 22

Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in XCMS allows remote attackers to change arbitrary passwords via certain password_ and rpassword_ parameters, po…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00883 Published 2007-09-24 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0