Browse CVEs

MEDIUM 6.8 CVE-2012-1414 Cross-site request forgery (CSRF) vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authenticati… Plume Cms after 1.2.4 Fix from $1,6002012-10-07 MEDIUM 6.5 CVE-2009-3418 Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow (1) remote authenticated users to execute arbitrary SQL commands via the m parameter … Plume Cms Mitigation only Fix from $1,6002009-09-25 HIGH 7.5 CVE-2006-7021 PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers to execute arbitrary PHP code … Plume Cms No fix yet Fix from $1,9502007-02-15 HIGH 7.5 CVE-2006-4533 Multiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote attackers to execute arbitrary PHP code via the _PX_co… Plume Cms after 1.0.6 Fix from $1,9502006-09-01 HIGH 7.5 CVE-2006-3562 PHP remote file inclusion vulnerabilities in plume cms 1.0.4 allow remote attackers to execute arbitrary PHP code via a URL in the _PX_config[manager… Plume Cms No fix yet Fix from $1,9502006-07-13 HIGH 7.5 CVE-2006-2645EPSS 6% PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to execute arbitrary code via a URL i… Plume Cms No fix yet Fix from $1,9502006-05-30 MEDIUM 6.8 CVE-2006-0725 PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when register_globals is enabled, allows remote attackers to include arbit… Plume Cms Mitigation only Fix from $1,6002006-02-16