Eshtery.she7ata Eshtery Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Eshtery.she7ata Eshtery Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2010-3404 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL commands via the…
• CVE-2014-2069 — CVSS 7.5 (high): Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname in the file…