Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Creasito Clear all filters
TI-2009-04681 CVE-2009-4925 · GHSA-24hw-jxqf-4vc6

Multiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito…

Priority LOW 32

Multiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito e-commerce content manager) 1.3.16, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00913 Published 2010-07-09 No fix listed CWE-89
TI-2006-05561 CVE-2006-5777 · GHSA-jvqc-jv32-9j54

Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass…

Priority LOW 38

Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged functions via a non-empty finame parameter to (1) addnewcont.php, (2) adminpassw.php, (3) amministrazione…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02883 Published 2006-11-07 No fix listed