Vulnerabilities

TI-2017-01465 CVE-2017-2164 · GHSA-cx7v-6ffv-jjmp

Cross-site scripting in Nippon Institute of Agroinformatics Ltd. SOY CMS with installer

LOW 29

Cross-site scripting vulnerability in SOY CMS with installer 1.8.12 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00842 Published 2017-05-12 No fix listed CWE-79

TI-2017-01464 CVE-2017-2163 · GHSA-q5f8-c7j3-9rwj

Path traversal in Nippon Institute of Agroinformatics Ltd. SOY CMS

LOW 38

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shop_id.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02483 Published 2017-05-12 No fix listed CWE-22

TI-2014-01566 CVE-2014-1998 · GHSA-q962-qgr8-4w85

Cross-site scripting (XSS) vulnerability in Nippon Institute of Agroinformatics SOY CMS…

LOW 22

Cross-site scripting (XSS) vulnerability in Nippon Institute of Agroinformatics SOY CMS 1.4.0c and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00931 Published 2014-06-05 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site scripting in Nippon Institute of Agroinformatics Ltd. SOY CMS with installer

Path traversal in Nippon Institute of Agroinformatics Ltd. SOY CMS

Cross-site scripting (XSS) vulnerability in Nippon Institute of Agroinformatics SOY CMS…