Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Hycus Clear all filters
TI-2011-03302 CVE-2011-3745 · GHSA-wxxw-7pvr-2chx

HycusCMS 1.0.3 allows remote attackers to obtain sensitive information via a direct…

Priority LOW 26

HycusCMS 1.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/hycus_template/template.ph…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200
TI-2010-04337 CVE-2010-4612 · GHSA-p4vc-vrgw-5wmm

Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when…

Priority LOW 33

Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user_name and (2) usr_email parameters to us…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01695 Published 2010-12-29 No fix listed CWE-89