Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Concept Intermedia Component: S@m Cms Clear all filters
TI-2024-03560 CVE-2024-3816

SQLi in S@M CMS

Priority MEDIUM 49

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to a blind SQL Injection executed using the search bar.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00483 Published 2024-06-28 No fix listed CWE-89
TI-2024-03547 CVE-2024-3801

XSS in S@M CMS

Priority LOW 27

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00329 Published 2024-06-28 No fix listed CWE-79
TI-2024-03546 CVE-2024-3800

XSS in S@M CMS

Priority LOW 27

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00294 Published 2024-06-28 No fix listed CWE-79