Overview 194 matches · 1 in Waratek scope · 1 protected · 2 exploited · 0 CISA KEV · 10 public PoC · 0 EPSS ≥ 0.5
194matches
1in Waratek scope0.5%
1protected0.5%
2exploited1.0%
0CISA KEV0.0%
10public PoC5.2%
0EPSS ≥ 0.50.0%
Protected by Waratek
1
0.5%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
193
99.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.5%
partly blocked
0
0.0%
not blocked
193
99.5%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 78 / year
20041
Not applicable1
High1
not blocked1
No public exploit1
20050
20061
Not applicable1
High1
not blocked1
Working exploit published1
20071
Not applicable1
Medium1
not blocked1
Working exploit published1
20085
Not applicable5
High5
not blocked5
Working exploit published4
No public exploit1
20091
Not applicable1
High1
not blocked1
Working exploit published1
20100
20110
20121
Not applicable1
High1
not blocked1
Working exploit published1
20130
20142
Not applicable2
High1
Medium1
not blocked2
No public exploit2
20150
20161
Not applicable1
Critical1
not blocked1
No public exploit1
20171
Not applicable1
Critical1
not blocked1
Exploited1
20189
Protected by Waratek1
Not applicable8
Critical2
High3
Medium4
blocked by ARMR today1
not blocked8
Working exploit published1
No public exploit8
20194
Not applicable4
Critical1
High1
Medium2
not blocked4
No public exploit4
20205
Not applicable5
Critical1
High4
not blocked5
No public exploit5
202116
Not applicable16
Critical4
High5
Medium7
not blocked16
No public exploit16
202220
Not applicable20
Critical3
High3
Medium14
not blocked20
No public exploit20
202320
Not applicable20
Critical6
High7
Medium7
not blocked20
Proof of concept only13
No public exploit7
202478
Not applicable78
High43
Medium32
Low3
not blocked78
Exploited1
Proof of concept only68
No public exploit9
202522
Not applicable22
Critical5
High4
Medium9
Low4
not blocked22
Proof of concept only17
No public exploit5
20266
Not applicable6
High1
Medium1
Low4
not blocked6
Proof of concept only5
No public exploit1
200420062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2024-33829 | Medium | 2024-05-06 | Not applicable | Proof of concept only | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=updateWebCache. |
| CVE-2024-4172 | Medium | 2024-04-25 | Not applicable | Proof of concept only | A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vulnerability is an unknown functionality of the file /admin/admin_cl.php?mudi=revPwd. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261991. |
| CVE-2024-32391 | High | 2024-04-19 | Not applicable | Proof of concept only | Cross Site Scripting vulnerability in MacCMS v.10 v.2024.1000.3000 allows a remote attacker to execute arbitrary code via a crafted payload. |
| CVE-2024-31759 | High | 2024-04-16 | Not applicable | Proof of concept only | An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the change password function. |
| CVE-2024-2911 | Medium | 2024-03-26 | Not applicable | Proof of concept only | A vulnerability, which was classified as problematic, was found in Tianjin PubliCMS 4.0.202302.e. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2023-51252 | Medium | 2024-01-10 | Not applicable | Proof of concept only | PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). Because files can be uploaded and online preview function is provided, pdf files and html files containing malicious code are uploaded, an XSS popup window is realized through online viewing. |
| CVE-2023-46990 | Critical | 2023-11-20 | Not applicable | No public exploit | Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function. |
| CVE-2023-48736 | Medium | 2023-11-18 | Not applicable | Proof of concept only | In International Color Consortium DemoIccMAX 3e7948b, CIccCLUT::Interp2d in IccTagLut.cpp in libSampleICC.a has an out-of-bounds read. |
| CVE-2023-48204 | Medium | 2023-11-16 | Not applicable | Proof of concept only | An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component. |
| CVE-2023-47249 | Medium | 2023-11-05 | Not applicable | Proof of concept only | In International Color Consortium DemoIccMAX 79ecb74, a CIccXmlArrayType:::ParseText function (for unsigned short) in IccUtilXml.cpp in libIccXML.a has an out-of-bounds read. |
| CVE-2023-46867 | Medium | 2023-10-30 | Not applicable | Proof of concept only | In International Color Consortium DemoIccMAX 79ecb74, CIccXformMatrixTRC::GetCurve in IccCmm.cpp in libSampleICC.a has a NULL pointer dereference. |
| CVE-2023-46866 | Medium | 2023-10-30 | Not applicable | Proof of concept only | In International Color Consortium DemoIccMAX 79ecb74, CIccCLUT::Interp3d in IccProfLib/IccTagLut.cpp in libSampleICC.a attempts to access array elements at out-of-bounds indexes. |
| CVE-2023-46603 | High | 2023-10-23 | Not applicable | No public exploit | In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPrmg.cpp in libSampleICC.a. |
| CVE-2023-46602 | High | 2023-10-23 | Not applicable | Proof of concept only | In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/IccUtilXml.cpp in libIccXML.a. |
| CVE-2023-5029 | High | 2023-09-17 | Not applicable | No public exploit | A vulnerability, which was classified as critical, was found in mccms 2.6. This affects an unknown part of the file /category/order/hits/copyright/46/finish/1/list/1. The manipulation with the input '"1 leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239871. |
| CVE-2023-34852 | Critical | 2023-06-15 | Not applicable | Proof of concept only | PublicCMS <=V4.0.202302 is vulnerable to Insecure Permissions. |
| CVE-2023-3236 | High | 2023-06-14 | Not applicable | No public exploit | A vulnerability classified as critical has been found in mccms up to 2.6.5. This affects the function pic_save of the file sys/apps/controllers/admin/Comic.php. The manipulation of the argument pic leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231507. |
| CVE-2023-3235 | High | 2023-06-14 | Not applicable | No public exploit | A vulnerability was found in mccms up to 2.6.5. It has been rated as critical. Affected by this issue is the function pic_api of the file sys/apps/controllers/admin/Comic.php. The manipulation of the argument url leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-231506 is the identifier assigned to this vulnerability. |
| CVE-2023-29815 | High | 2023-04-28 | Not applicable | Proof of concept only | mccms v2.6.3 is vulnerable to Cross Site Request Forgery (CSRF). |
| CVE-2023-26782 | Medium | 2023-04-28 | Not applicable | Proof of concept only | An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface ->System Configuration->Cache Configuration->Cache security characters. |
| CVE-2023-26781 | Critical | 2023-04-28 | Not applicable | Proof of concept only | SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center ->Reader Comments ->Search. |
| CVE-2020-20915 | Critical | 2023-04-04 | Not applicable | Proof of concept only | SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl. |
| CVE-2020-20914 | Critical | 2023-04-04 | Not applicable | Proof of concept only | SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter. |
| CVE-2022-4126 | Critical | 2023-03-27 | Not applicable | No public exploit | Use of Default Password vulnerability in ABB RCCMD on Windows, Linux, MacOS allows Try Common or Default Usernames and Passwords.This issue affects RCCMD: before 4.40 230207. |
| CVE-2022-47872 | High | 2023-02-01 | Not applicable | No public exploit | A Server-Side Request Forgery (SSRF) in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address module. |
| CVE-2022-44870 | Medium | 2023-01-06 | Not applicable | Proof of concept only | A reflected cross-site scripting (XSS) vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module. |
| CVE-2022-43517 | High | 2022-12-13 | Not applicable | No public exploit | A vulnerability has been identified in Simcenter STAR-CCM+ (All versions < V2306). The affected application improperly assigns file permissions to installation folders. This could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated privileges. |
| CVE-2022-3950 | Medium | 2022-11-11 | Not applicable | No public exploit | A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is a972dc9b1c94aea2d84478bf26283904c21e4ca2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213456. |
| CVE-2021-27693 | Critical | 2022-09-02 | Not applicable | No public exploit | Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage. |
| CVE-2022-35148 | Medium | 2022-08-17 | Not applicable | No public exploit | maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html. |
| CVE-2022-34659 | Medium | 2022-08-10 | Not applicable | No public exploit | A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license server is used). Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information. |
| CVE-2022-31303 | Medium | 2022-06-21 | Not applicable | No public exploit | maccms10 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field. |
| CVE-2022-31302 | Medium | 2022-06-21 | Not applicable | No public exploit | maccms8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field. |
| CVE-2022-26041 | Medium | 2022-06-13 | Not applicable | No public exploit | Directory traversal vulnerability in RCCMD 4.26 and earlier allows a remote authenticated attacker with an administrative privilege to read or alter an arbitrary file on the server via unspecified vectors. |
| CVE-2022-29784 | Medium | 2022-06-03 | Not applicable | No public exploit | PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java. |
| CVE-2021-43707 | Medium | 2022-03-31 | Not applicable | No public exploit | Cross Site Scripting (XSS) vulnerability exists in Maccms v10 via link_Name parameter. |
| CVE-2022-27887 | Medium | 2022-03-25 | Not applicable | No public exploit | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/vod/data.html via the repeat parameter. |
| CVE-2022-27886 | Medium | 2022-03-25 | Not applicable | No public exploit | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/ulog/index.html via the wd parameter. |
| CVE-2022-27885 | Medium | 2022-03-25 | Not applicable | No public exploit | Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/website/data.html via the select and input parameters. |
| CVE-2022-27884 | Medium | 2022-03-25 | Not applicable | No public exploit | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/plog/index.html via the wd parameter. |
| CVE-2022-26573 | Medium | 2022-03-25 | Not applicable | No public exploit | Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters. |
| CVE-2022-27333 | High | 2022-03-21 | Not applicable | No public exploit | idcCMS v1.10 was discovered to contain an issue which allows attackers to arbitrarily delete the install.lock file, resulting in a reset of the CMS settings and data. |
| CVE-2021-45787 | Medium | 2022-03-16 | Not applicable | No public exploit | There is a stored Cross Site Scripting (XSS) vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name and remarks. |
| CVE-2021-45786 | Critical | 2022-03-16 | Not applicable | No public exploit | In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges. |
| CVE-2022-24661 | High | 2022-03-08 | Not applicable | No public exploit | A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2022.1). The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process. |
| CVE-2022-23389 | Critical | 2022-02-14 | Not applicable | No public exploit | PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter. |
| CVE-2021-42024 | High | 2021-12-14 | Not applicable | No public exploit | A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < 2021.3.1). The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. |
| CVE-2020-21434 | Medium | 2021-10-04 | Not applicable | No public exploit | Maccms 10 contains a cross-site scripting (XSS) vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field. |
| CVE-2020-21387 | Medium | 2021-10-04 | Not applicable | No public exploit | A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload. |
| CVE-2020-21386 | High | 2021-10-04 | Not applicable | No public exploit | A Cross-Site Request Forgery (CSRF) in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges. |
| CVE-2020-20514 | High | 2021-09-24 | Not applicable | No public exploit | A Cross-Site Request Forgery (CSRF) in Maccms v10 via admin.php/admin/admin/del/ids/<id>.html allows authenticated attackers to delete all users. |
| CVE-2021-40881 | Critical | 2021-09-15 | Not applicable | No public exploit | An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code. |
| CVE-2021-25665 | High | 2021-09-14 | Not applicable | No public exploit | A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2021.2.1). The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13700) |
| CVE-2020-21082 | Medium | 2021-09-14 | Not applicable | No public exploit | A cross-site scripting (XSS) vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names. |
| CVE-2020-21081 | Medium | 2021-09-14 | Not applicable | No public exploit | A cross-site request forgery (CSRF) in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL. |
| CVE-2020-21363 | Medium | 2021-08-11 | Not applicable | No public exploit | An arbitrary file deletion vulnerability exists within Maccms10. |
| CVE-2020-21362 | Medium | 2021-08-11 | Not applicable | No public exploit | A cross site scripting (XSS) vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter. |
| CVE-2020-21359 | Critical | 2021-08-11 | Not applicable | No public exploit | An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name. |
| CVE-2020-21333 | Medium | 2021-07-09 | Not applicable | No public exploit | Cross Site Scripting (XSS) vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case. |
| CVE-2020-20290 | High | 2021-02-01 | Not applicable | No public exploit | Directory traversal vulnerability in the yccms 3.3 project. The delete, deletesite, and deleteAll functions' improper judgment of the request parameters, triggers a directory traversal vulnerability. |
| CVE-2020-20289 | Critical | 2021-02-01 | Not applicable | No public exploit | Sql injection vulnerability in the yccms 3.3 project. The no_top function's improper judgment of the request parameters, triggers a sql injection vulnerability. |
| CVE-2020-20287 | Critical | 2021-02-01 | Not applicable | No public exploit | Unrestricted file upload vulnerability in the yccms 3.3 project. The xhUp function's improper judgment of the request parameters, triggers remote code execution. |
| CVE-2020-12320 | High | 2020-11-12 | Not applicable | No public exploit | Uncontrolled search path in Intel(R) SCS Add-on for Microsoft* SCCM before version 2.1.10 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2020-5374 | High | 2020-07-14 | Not applicable | No public exploit | Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnerability. A remote unauthenticated attacker may exploit this vulnerability to gain access to the appliance data for remotely managed devices. |
| CVE-2020-5373 | High | 2020-07-14 | Not applicable | No public exploit | Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to retrieve the system inventory data of the managed device. |
| CVE-2020-10512 | High | 2020-04-15 | Not applicable | No public exploit | HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands. |
| CVE-2020-10511 | Critical | 2020-04-15 | Not applicable | No public exploit | HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL. |
| CVE-2019-16192 | Critical | 2019-09-09 | Not applicable | No public exploit | upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive. |
| CVE-2018-19465 | Medium | 2019-06-07 | Not applicable | No public exploit | Maccms through 8.0 allows XSS via the site_keywords field to index.php?m=system-config because of tpl/module/system.php and tpl/html/system_config.html, related to template/paody/html/vod_index.html. |
| CVE-2019-9829 | High | 2019-03-15 | Not applicable | No public exploit | Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/default_pc/html/art Edit action. This occurs because template rendering uses an include operation on a cache file, which bypasses the prohibition of .php files as templates. |
| CVE-2019-8410 | Medium | 2019-02-27 | Not applicable | No public exploit | Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html/vod_type.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the t_name parameter (not t_key). |
| CVE-2018-18927 | Medium | 2018-11-04 | Not applicable | No public exploit | An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the page_list "attached" attribute (which typically has 'class="icon-globe icon-large"' in its value), as demonstrated by an 'UPDATE sys_module SET attached = "[XSS]" WHERE id="page_list"' statement. |
| CVE-2018-18835 | Critical | 2018-10-30 | Not applicable | No public exploit | upload_template() in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file. |
| CVE-2018-17368 | Medium | 2018-09-23 | Not applicable | No public exploit | An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks. |
| CVE-2018-12914 | Critical | 2018-06-27 | Not applicable | No public exploit | A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a ZIP archive that contains a .jsp file with a directory traversal pathname. After an unzip operation, the attacker can execute arbitrary code by visiting a .jsp URI. |
| CVE-2018-12494 | Medium | 2018-06-15 | Not applicable | No public exploit | An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.html?path=../ URI. |
| CVE-2018-12493 | Medium | 2018-06-15 | Not applicable | No public exploit | An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsWebFile/list.html?path=../ URI. |
| CVE-2018-12114 | High | 2018-06-14 | Not applicable | Working exploit published | Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts. |
| CVE-2018-11500 | High | 2018-05-26 | Not applicable | No public exploit | An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" that can add an admin account. |
| CVE-2018-1000054 | High | 2018-02-09 | Protected by Waratek | No public exploit | Jenkins CCM Plugin 3.1 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks. |
| CVE-2017-17733 | Critical | 2017-12-18 | Not applicable | Exploited | Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request. |
| CVE-2016-9155 | Critical | 2016-11-22 | Not applicable | No public exploit | The following SIEMENS branded IP Camera Models CCMW3025, CVMW3025-IR, CFMW3025 prior to version 1.41_SP18_S1; CCPW3025, CCPW5025 prior to version 0.1.73_S1; CCMD3025-DN18 prior to version v1.394_S1; CCID1445-DN18, CCID1445-DN28, CCID1145-DN36, CFIS1425, CCIS1425, CFMS2025, CCMS2025, CVMS2025-IR, CFMW1025, CCMW1025 prior to version v2635_SP1 could allow an attacker with network access to the web server to obtain administrative credentials under certain circumstances. |
| CVE-2013-7362 | High | 2014-04-10 | Not applicable | No public exploit | An unspecified RFC function in SAP CCMS Agent allows remote attackers to execute arbitrary commands via unknown vectors. |
| CVE-2013-7356 | Medium | 2014-04-10 | Not applicable | No public exploit | Unspecified vulnerability in the SAP CCMS / Database Monitors for Oracle allows attackers to obtain the database password via unknown vectors. |
| CVE-2011-5170 | High | 2012-09-15 | Not applicable | Working exploit published | Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name in an m3u playlist. |
| CVE-2008-7069 | High | 2009-08-25 | Not applicable | Working exploit published | All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat. |
| CVE-2008-5195 | High | 2008-11-21 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in SebracCMS (sbcms) 0.4 allow remote attackers to execute arbitrary SQL commands via (1) the recid parameter to cms/form/read.php, (2) the uname parameter to cms/index.php, and other unspecified vectors. |
| CVE-2008-4526 | High | 2008-10-09 | Not applicable | Working exploit published | Multiple directory traversal vulnerabilities in CCMS 3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter to (1) index.php, (2) forums.php, (3) admin.php, (4) header.php, (5) pages/story.php and (6) pages/poll.php. |
| CVE-2008-1904 | High | 2008-04-22 | Not applicable | Working exploit published | Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified this_cookie cookie. |
| CVE-2007-6703 | High | 2008-03-04 | Not applicable | No public exploit | Unspecified vulnerability in vdccm before 0.10.1 in SynCE (SynCE-dccm) might allow attackers to cause a denial of service via unspecified vectors. |
| CVE-2007-6658 | High | 2008-01-04 | Not applicable | Working exploit published | SQL injection vulnerability in admin.php/vars.php in CustomCMS (CCMS) 3.1 Demo allows remote attackers to execute arbitrary SQL commands via the p parameter in the Console page. |
| CVE-2007-1516 | Medium | 2007-03-20 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the functions_dir parameter. |
| CVE-2006-5304 | High | 2006-10-17 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in inc/settings.php in IncCMS Core 1.0.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter. |
| CVE-2004-1694 | High | 2004-09-21 | Not applicable | No public exploit | Symantec ON Command CCM 5.4.x and iCommand 3.0.x has four default usernames and passwords, one of which is hardcoded, which allows remote attackers to gain unauthorized access. |