Wavelink Media Tutorialcms — known CVE vulnerabilities

Every CVE whose affected-product data names Wavelink Media Tutorialcms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2007-2822 — CVSS 9.3 (critical): TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the (1) loggedIn and…
• CVE-2007-2599 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to execute…
• CVE-2007-2600 — CVSS 6.8 (medium): Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to…
• CVE-2008-0254 — CVSS 6.8 (medium): SQL injection vulnerability in activate.php in TutorialCMS (aka Photoshop Tutorials) 1.02, when magic_quotes_gpc is disabled, allows remote…