Kasseler-Cms
9 CVEs across 2 Kasseler-Cms products. Browse Kasseler-Cms vulnerabilities, severities, and proof-of-concept exploits.
Kasseler-Cms products with known CVEs
Kasseler-Cms CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2013-3729 | | | 2014-03-13 | Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hijack the authentication of administrators… |
CVE-2013-3728 | | | 2014-03-13 | Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissions to create categories to inject arbit… |
CVE-2013-3727 | | | 2014-03-13 | SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL commands via the groups[] parameter to ad… |
CVE-2009-4822 | | | 2010-04-27 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1… |
CVE-2009-2229 | | | 2009-06-26 | Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary files via a .. (dot dot) in the file param… |
CVE-2009-2228 | | | 2009-06-26 | Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web script or HTML via the url parameter in… |
CVE-2008-4356 | | | 2008-09-30 | Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via (1) the nid parameter to in… |
CVE-2008-3088 | | | 2008-07-09 | Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrary web script or HTM… |
CVE-2008-3087 | | | 2008-07-09 | Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to index.php… |