Runcms vulnerabilities

Products

• Runcms 31
• Myannonces 2

Newest

• runcms Cross-site scripting (XSS) vulnerability in modules/headlines/magpierss/scripts/magpie_debug.php... CVE-2010-2852 2.6 LowJuly 23, 2010
• runcms RunCMS 2M1, when running with certain error_reporting levels, allows remote attackers to obtain... CVE-2009-3815 5.0 MediumOctober 27, 2009
• runcms Static code injection vulnerability in RunCMS 2M1 allows remote authenticated administrators to... CVE-2009-3814 6.5 MediumOctober 27, 2009
• runcms Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute... CVE-2009-3813 6.5 MediumOctober 27, 2009
• runcms Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote... CVE-2009-3804 Public exploit 6.5 MediumOctober 27, 2009
• runcms Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote... CVE-2008-7222 Public exploit 4.3 MediumSeptember 14, 2009
• runcms Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack... CVE-2008-7221 6.8 MediumSeptember 14, 2009
• runcms myannonces SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers... CVE-2009-2591 Public exploit 7.5 HighJuly 24, 2009
• runcms, runcms newbb plus module +1 more Multiple PHP remote file inclusion vulnerabilities in the Newbb Plus (newbb_plus) module 0.93 in... CVE-2008-3354 Public exploit 7.5 HighJuly 28, 2008
• myarticles, runcms myarticles module +1 more SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows... CVE-2008-2084 Public exploit 7.5 HighMay 5, 2008
• runcms, runcms photo module +1 more SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote... CVE-2008-1551 Public exploit 7.5 HighMarch 31, 2008
• runcms SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to... CVE-2008-1462 Public exploit 6.8 MediumMarch 24, 2008
• runcms myannonces SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS... CVE-2008-0878 Public exploit 7.5 HighFebruary 21, 2008
• runcms SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6... CVE-2008-0224 Public exploit 7.5 HighJanuary 10, 2008
• runcms Unspecified vulnerability in RunCMS before 1.6.1 has unknown impact and attack vectors, related... CVE-2007-6549 7.5 HighDecember 28, 2007
• runcms Multiple direct static code injection vulnerabilities in RunCMS before 1.6.1 allow remote... CVE-2007-6548 Public exploit 7.5 HighDecember 28, 2007
• runcms RunCMS before 1.6.1 does not require entry of the old password during a password change, which... CVE-2007-6547 Public exploit 6.8 MediumDecember 28, 2007
• runcms RunCMS before 1.6.1 uses a predictable session id, which makes it easier for remote attackers to... CVE-2007-6546 Public exploit 6.4 MediumDecember 28, 2007
• runcms Multiple cross-site scripting (XSS) vulnerabilities in RunCMS before 1.6.1 allow remote attackers... CVE-2007-6545 Public exploit 4.3 MediumDecember 28, 2007
• runcms Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute... CVE-2007-6544 Public exploit 7.5 HighDecember 28, 2007
• runcms Unspecified vulnerability in newbb_plus in RunCms 1.5.2 has unknown impact and attack vectors. CVE-2007-5535 10.0 HighOctober 18, 2007
• runcms The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive... CVE-2007-2539 Public exploit 7.8 HighMay 9, 2007
• runcms SQL injection vulnerability in class/debug/debug_show.php in RunCms 1.5.2 and earlier allows... CVE-2007-2538 Public exploit 7.5 HighMay 9, 2007
• runcms Multiple SQL injection vulnerabilities in RunCMS 1.4.1 allow remote attackers to execute... CVE-2006-4667 7.5 HighSeptember 9, 2006
• runcms Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read... CVE-2006-1793 Public exploit 7.6 HighApril 17, 2006
• runcms Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to... CVE-2006-1216 Public exploit 4.3 MediumMarch 14, 2006
• runcms Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to... CVE-2006-0875 Public exploit 5.0 MediumFebruary 24, 2006
• runcms SQL injection vulnerability in pmlite.php in RunCMS 1.2 and 1.3a allows remote attackers to... CVE-2006-0721 Public exploit 7.5 HighFebruary 16, 2006
• runcms Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with register_globals... CVE-2006-0659 Public exploit 6.8 MediumFebruary 13, 2006
• runcms Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to... CVE-2005-2692 7.5 HighAugust 24, 2005
• runcms includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTR_OVERWRITE on... CVE-2005-2691 7.5 HighAugust 24, 2005
• e-xoops, runcms +1 more RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar... CVE-2005-1031 5.0 MediumApril 9, 2005
• ciamos, e-xoops, runcms +2 more highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other... CVE-2005-0828 Public exploit 5.0 MediumMarch 22, 2005
• ciamos, e-xoops, runcms +2 more Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other... CVE-2005-0827 5.0 MediumMarch 22, 2005