Cromosoft Simple Plantilla Php — known CVE vulnerabilities

Every CVE whose affected-product data names Cromosoft Simple Plantilla Php, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2007-1139 — CVSS 10.0 (critical): Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to upload arbitrary scripts via a…
• CVE-2007-1138 — CVSS 5.0 (medium): Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to list…