KA
Vendor
Kasseler-cms
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2013-3729 | KA Kasseler-cms Kasseler-cms | – | Mar 13 | Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hijack the authentication of administrators for requests that… |
| CVE-2013-3728 | KA Kasseler-cms Kasseler-cms | – | Mar 13 | Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissions to create categories to inject arbitrary web script or… |
| CVE-2013-3727 | KA Kasseler-cms Kasseler-cms | – | Mar 13 | SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL commands via the groups[] parameter to admin.php |
| CVE-2009-4822 | KC Kasseler Cms Kasseler-cms | – | Apr 27 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) do, (2) id, and… |
| CVE-2009-2229 | KC Kasseler Cms Kasseler-cms | – | Jun 26 | Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary files via a |
| CVE-2009-2228 | KC Kasseler Cms Kasseler-cms | – | Jun 26 | Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web script or HTML via the url parameter in a redirect action |
| CVE-2008-4356 | KC Kasseler Cms Kasseler-cms | – | Sep 30 | Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via (1) the nid parameter to index.php in a View… |
| CVE-2008-3087 | KC Kasseler Cms Kasseler-cms | – | Jul 9 | Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a |
| CVE-2008-3088 | KC Kasseler Cms Kasseler-cms | – | Jul 9 | Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrary web script or HTML via the cid… |