Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Concept Intermedia Clear all filters
TI-2025-06727 CVE-2025-7385 · GHSA-92m7-gm53-fg8x

SQL Injection in GOV CMS

Priority MEDIUM 48

Input from search query parameter in GOV CMS is not sanitized properly, leading to a Blind SQL injection vulnerability, which might be exploited by an unauthenticated remote attacker.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00449 Published 2025-09-04 Fixed in 4.0 CWE-89
TI-2024-03560 CVE-2024-3816

SQLi in S@M CMS

Priority MEDIUM 49

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to a blind SQL Injection executed using the search bar.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00483 Published 2024-06-28 No fix listed CWE-89
TI-2024-03547 CVE-2024-3801

XSS in S@M CMS

Priority LOW 27

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00329 Published 2024-06-28 No fix listed CWE-79
TI-2024-03546 CVE-2024-3800

XSS in S@M CMS

Priority LOW 27

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00294 Published 2024-06-28 No fix listed CWE-79