Igreks Milkystep Light — known CVE vulnerabilities

Every CVE whose affected-product data names Igreks Milkystep Light, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2015-2955 — CVSS 7.5 (high): Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary OS commands via…
• CVE-2015-2956 — CVSS 7.5 (high): SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute…
• CVE-2015-2954 — CVSS 6.8 (medium): Cross-site request forgery (CSRF) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote…
• CVE-2015-2952 — CVSS 6.5 (medium): The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote…
• CVE-2015-2958 — CVSS 6.4 (medium): Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to bypass intended access restrictions…
• CVE-2015-2953 — CVSS 5.0 (medium): Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to bypass intended access restrictions…
• CVE-2015-2957 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote…