Jaf Cms (Salims Softhouse) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 13 known versions, newest CVE from 2007-11-27. Vendor: Salims Softhouse.
CVEs of Jaf Cms
- CVE-2007-6142 - CVSS 4.3 (medium), 2007-11-27: Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to inject arbitrary web script…
- CVE-2006-7128 - CVSS 7.5 (high), 2007-03-06: PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the website…
- CVE-2006-7127 - CVSS 6.8 (medium), 2007-03-06: Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the main_dir…
- CVE-2006-5131 - CVSS 7.5 (high), 2006-10-03: module/shout/jafshout.php (aka the shoutbox) in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allows remote attackers to execute arbitrary code within…
- CVE-2006-5130 - CVSS 6.8 (medium), 2006-10-03: Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allow remote attackers to inject arbitrary web script…
- CVE-2006-5129 - CVSS 6.8 (medium), 2006-10-03: Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allow remote attackers to inject arbitrary web script…
- CVE-2005-2053 - CVSS 5 (medium), 2005-06-28: Just another flat file (JAF) CMS before 3.0 Final allows remote attackers to obtain sensitive information via (1) an * (asterisk) in the id parameter, (2) a…
- CVE-2004-1505 - CVSS 7.5 (high), 2004-12-31: Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute…
- CVE-2004-1504 - CVSS 5 (medium), 2004-12-31: The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sensitive information via a blank show…
