| Max CVSS | 7.5 | Min CVSS | 7.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-6544 | 7.5 |
Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the lid parameter to (1) brokenfile.php, (2) visit.php, or (3) ratefile.php in modules/mydownloads/; or (4) ratelink.php, (5) m
|
15-10-2018 - 21:55 | 28-12-2007 - 00:46 | |
| CVE-2007-6548 | 7.5 |
Multiple direct static code injection vulnerabilities in RunCMS before 1.6.1 allow remote authenticated administrators to inject arbitrary PHP code via the (1) header and (2) footer parameters to modules/system/admin.php in a meta-generator action, (
|
15-10-2018 - 21:55 | 28-12-2007 - 00:46 | |
| CVE-2007-6549 | 7.5 |
Unspecified vulnerability in RunCMS before 1.6.1 has unknown impact and attack vectors, related to "pagetype using."
|
08-08-2017 - 01:29 | 28-12-2007 - 00:46 |