Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Insane Visions Component: Onecms Clear all filters
TI-2008-06897 CVE-2008-7209 · GHSA-68j2-2v53-vhg2

Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4…

Priority MEDIUM 42

Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows remote attackers to execute arbitrary code by uploading a file with an executable extension and using…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06007 Published 2009-09-11 No fix listed CWE-264
TI-2008-06896 CVE-2008-7208 · GHSA-q7xr-35mh-wq2h

Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote…

Priority LOW 34

Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username parameter ($usernameb variable) to a_login.php or (2) user paramet…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01768 Published 2009-09-11 No fix listed CWE-89