Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Ferretcms Project Component: Ferretcms Clear all filters
TI-2015-01250 CVE-2015-1373 · GHSA-xg94-pwpg-xffq

Multiple cross-site scripting (XSS) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha…

Priority LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter in a search request, (2) username in a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03232 Published 2015-01-27 No fix listed CWE-79
TI-2015-01248 CVE-2015-1371 · GHSA-4qfh-mfjq-f23c

Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote…

Priority MEDIUM 44

Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.08058 Published 2015-01-27 No fix listed CWE-20