Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Blueriver Component: Muracms Clear all filters
TI-2018-05396 CVE-2018-7486 · GHSA-pcgv-6rcf-4897

Blue River Mura CMS before v7.0.7029 supports inline function calls with an [m] tag and…

Priority LOW 36

Blue River Mura CMS before v7.0.7029 supports inline function calls with an [m] tag and [/m] end tag, without proper restrictions on file types or pathnames, which allows remote attackers to execute arbitrary code via an…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02466 Published 2018-02-26 No fix listed CWE-22
TI-2017-05868 CVE-2017-8302 · GHSA-4m59-jfjc-jrjf

Mura CMS 7.0.6967 allows admin/?muraAction= XSS attacks, related to…

Priority LOW 26

Mura CMS 7.0.6967 allows admin/?muraAction= XSS attacks, related to admin/core/views/carch/list.cfm, admin/core/views/carch/loadsiteflat.cfm, admin/core/views/cusers/inc/dsp_nextn.cfm, admin/core/views/cusers/inc/dsp_sea…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00676 Published 2017-04-27 No fix listed CWE-79