Every CVE whose affected-product data names Contenido Contendio, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (5)
CVE-2005-4132 — CVSS 7.5 (high): Unspecified "security leak" vulnerability in Contenido before 4.6.4, when register_globals is on and allow_url_fopen is true, has…
CVE-2006-5380 — CVSS 7.5 (high): Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute arbitrary PHP code via a URL in the contenido_path…
CVE-2006-5381 — CVSS 5.0 (medium): Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database…
CVE-2008-2911 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject arbitrary web script…
CVE-2014-9433 — CVSS 2.6 (low): Multiple cross-site scripting (XSS) vulnerabilities in cms/front_content.php in Contenido before 4.9.6, when advanced mod rewrite (AMR) is…