Vulnerabilities

TI-2013-05999 CVE-2013-7334 · GHSA-4v57-p22c-8frv

Cross-site request forgery (CSRF) vulnerability in ImageCMS before 4.2 allows remote…

LOW 32

Cross-site request forgery (CSRF) vulnerability in ImageCMS before 4.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the q parameter, related t…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0092 Published 2014-03-11 No fix listed CWE-352

TI-2012-05123 CVE-2012-6290 · GHSA-h9cf-gghr-p937

SQL injection vulnerability in ImageCMS before 4.2 allows remote authenticated…

LOW 36

SQL injection vulnerability in ImageCMS before 4.2 allows remote authenticated administrators to execute arbitrary SQL commands via the q parameter to admin/admin_search/.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04316 Published 2014-03-11 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in ImageCMS before 4.2 allows remote…

SQL injection vulnerability in ImageCMS before 4.2 allows remote authenticated…