Login Request a demo
KC
Product
Kasseler Cms
by Kasseler-cms · last CVE Mar 13, 2014
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities9Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Kasseler Cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2013-3729
–
1%
Mar 13
Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hijack the authentication of administrators for requests that…
Affected: through 2
CVE-2013-3728
–
3%
Mar 13
Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissions to create categories to inject arbitrary web script or…
Affected: through 2
CVE-2013-3727
–
3%
Mar 13
SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL commands via the groups[] parameter to admin.php
Affected: through 2
CVE-2009-4822
–
1%
Apr 27
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) do, (2) id, and…
Affected: 1.3.4
CVE-2009-2229
–
4%
Jun 26
Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary files via a
Affected: 1.3.5
CVE-2009-2228
–
1%
Jun 26
Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web script or HTML via the url parameter in a redirect action
Affected: All versions, or not specified
CVE-2008-4356
–
1%
Sep 30
Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via (1) the nid parameter to index.php in a View…
Affected: 1.1.0; 1.2.0
CVE-2008-3087
–
3%
Jul 9
Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a
Affected: 1.3.0
CVE-2008-3088
–
2%
Jul 9
Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrary web script or HTML via the cid…
Affected: 1.3.0; 1.3.1
Showing 9