Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Kasseler-cms Component: Kasseler-cms Clear all filters
TI-2013-03248 CVE-2013-3729 · GHSA-2x7x-45v7-xmvx

Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232…

Priority LOW 32

Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the (1)…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01215 Published 2014-03-13 No fix listed CWE-352
TI-2013-03247 CVE-2013-3728 · GHSA-395f-v3mq-5j4j

Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissions to create categories to inject arbitrary web script or HTML via the cat parameter in an admin_new…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02965 Published 2014-03-13 No fix listed CWE-79