Insanevisions
9 CVEs across 4 Insanevisions products. Browse Insanevisions vulnerabilities, severities, and proof-of-concept exploits.
Insanevisions products with known CVEs
Insanevisions CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2015-1060 | | | 2015-01-16 | Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduc… |
CVE-2015-1059 | | | 2015-01-16 | Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file… |
CVE-2015-1058 | | | 2015-01-16 | Multiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data[Category][… |
CVE-2010-4877 | | | 2011-10-07 | Cross-site scripting (XSS) vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the view parameter. |
CVE-2010-2618 | | | 2010-07-02 | PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register_globals is enabled, allows remote attackers to execut… |
CVE-2010-0952 | | | 2010-03-10 | SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the us… |
CVE-2009-1259 | | | 2009-04-07 | SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary… |
CVE-2008-6652 | | | 2009-04-07 | SQL injection vulnerability in asd.php in OneCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the sitename parameter. |
CVE-2008-2482 | | | 2008-05-28 | Directory traversal vulnerability in install_mod.php in insanevisions OneCMS 2.5 allows remote attackers to include and execute arbitrary local files via a… |