Basic-cms - vulnerabilities (CVEs)
8 CVEs in 2 products, 0 in the last 30 days, newest from 2015-01-03.
Products
Newest CVEs of Basic-cms
- CVE-2010-5318 - CVSS 4.3 (medium), 2015-01-03: The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the…
- CVE-2010-5317 - CVSS 7.5 (high), 2015-01-03: Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands via (1) the…
- CVE-2010-5316 - CVSS 4.3 (medium), 2015-01-03: Cross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to inject arbitrary web script or HTML via a…
- CVE-2011-3804 - CVSS 5 (medium), 2011-09-24: SweetRice 0.7.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error…
- CVE-2010-0695 - CVSS 4.3 (medium), 2010-02-23: Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary web script or HTML via the nav_id…
- CVE-2009-4231 - CVSS 7.5 (high), 2009-12-08: Directory traversal vulnerability in as/lib/plugins.php in SweetRice 0.5.3 and earlier allows remote attackers to include and execute arbitrary local files…
- CVE-2009-4224 - CVSS 6.8 (medium), 2009-12-07: Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to execute arbitrary PHP code via a URL in…
- CVE-2008-2789 - CVSS 7.5 (high), 2008-06-20: SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands via the page_id parameter.
