Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
AutosectoolsV-cms

3 matches found

CVE
CVE•added 2011/12/15 2:0 a.m.•156 views

CVE-2011-4828

CVE-2011-4828 affects AutoSec Tools V-CMS 1.0, specifically the inline_image_upload.php file upload feature. An unrestricted file upload allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request to the file in tem...

7.5CVSS7.8AI score0.65485EPSS
Web
CVE
CVE•added 2011/12/15 2:0 a.m.•52 views

CVE-2011-4827

CVE-2011-4827 involves multiple cross-site scripting (XSS) vulnerabilities in AutoSec Tools V-CMS 1.0. The issues occur in a) redirect.php via the p parameter and b) includes/TrueColorPicker/index.php via the box parameter, caused by improper handling in includes/TrueColorPicker/class.TrueColorPi...

4.3CVSS5.9AI score0.01179EPSS
Web
CVE
CVE•added 2011/12/15 2:0 a.m.•51 views

CVE-2011-4826

CVE-2011-4826 affects AutoSec Tools V-CMS 1.0. The vulnerability is an SQL injection in session.php exploitable via the user parameter to process.php, enabling remote attackers to execute arbitrary SQL commands. Multiple connected sources corroborate this flaw (including Red Hat, NVD, and OpenVAS...

6.8CVSS8.6AI score0.01203EPSS