Kasseler-cms Kasseler Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Kasseler-cms Kasseler Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2008-4356 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via (1) the…
• CVE-2008-3087 — CVSS 5.0 (medium): Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file…
• CVE-2009-2229 — CVSS 5.0 (medium): Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary files via a .. (dot…
• CVE-2008-3088 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject…
• CVE-2009-2228 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2009-4822 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject arbitrary web…