Zanfi Solutions Zanfi Cms Lite — known CVE vulnerabilities

Every CVE whose affected-product data names Zanfi Solutions Zanfi Cms Lite, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2008-4159 — CVSS 7.5 (high): SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitrary SQL commands via…
• CVE-2008-4158 — CVSS 6.8 (medium): Multiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote attackers to include and execute arbitrary…
• CVE-2004-2195 — CVSS 5.0 (medium): PHP remote file inclusion vulnerability in index.php in Zanfi CMS lite 1.1 allows remote attackers to execute arbitrary PHP code via the…
• CVE-2004-2196 — CVSS 5.0 (medium): Zanfi CMS lite 1.1 allows remote attackers to obtain the full path of the web server via direct requests without required arguments to (1)…