Anantasoft Gazelle Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Anantasoft Gazelle Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2009-3180 — CVSS 7.5 (high): Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php.
• CVE-2009-3182 — CVSS 6.8 (medium): Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to…
• CVE-2009-3181 — CVSS 5.0 (medium): Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in…
• CVE-2009-3167 — CVSS 4.3 (medium): Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to…
• CVE-2009-3171 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary…