Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Socialcms Clear all filters
TI-2012-01238 CVE-2012-1416 · GHSA-p7w3-qmp3-fc84

Multiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow…

Priority LOW 32

Multiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrator accounts via a member_new action…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01118 Published 2012-10-08 No fix listed CWE-352
TI-2012-01757 CVE-2012-1982 · GHSA-q22f-p36h-w3hq

Cross-site scripting (XSS) vulnerability in my_admin/admin1_list_pages.php in SocialCMS…

Priority LOW 18

Cross-site scripting (XSS) vulnerability in my_admin/admin1_list_pages.php in SocialCMS 1.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the TR_title parameter in an edit act…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00768 Published 2012-04-04 No fix listed CWE-79