TI-2013-00096 CVE-2013-0161 · GHSA-26rx-mmh7-vvg6
Havalite CMS 1.1.7 has a stored XSS vulnerability
Priority LOW 26
Havalite CMS 1.1.7 has a stored XSS vulnerability
Vulnerabilities
5 records
TI-2012-04944 CVE-2012-5919 · GHSA-9865-2p5q-66jx
Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow…
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) find or (2) replace fields to havalite/findReplace.php; (3) user…
TI-2012-04919 CVE-2012-5894 · GHSA-hpf8-fq4j-xr48
SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows…
Priority LOW 35
SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the postId parameter.
TI-2012-04918 CVE-2012-5893 · GHSA-qc77-grrc-jpc5
Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and…
Priority LOW 35
Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading a file with a .php;.gif extension, then accessing it via a direct…
TI-2012-04917 CVE-2012-5892 · GHSA-8p64-g888-56pp
Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with…
Priority LOW 26
Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the configuration database via a direct request for data/havalite…