Seditio Security Vulnerabilities and Issues — Seditio CVE List

Lucene search

NeocromeSeditio

4 matches found

CVE•added 2007/07/30 5:30 p.m.•49 views

CVE-2007-4057

Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users to upload arbitrary PHP code via a filename ending with (1) .php.gif, (2) .php.jpg, or (3) .php.png.

6.5CVSS6.7AI score0.02393EPSS

CVE•added 2006/12/15 7:28 p.m.•44 views

CVE-2006-6577

SQL injection vulnerability in polls.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

6.8CVSS8.4AI score0.00296EPSS

CVE•added 2007/12/01 6:46 a.m.•41 views

CVE-2007-6202

SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attackers to execute arbitrary SQL commands via the pag_sub[] parameter to plug.php.

6.8CVSS8.4AI score0.00611EPSS

CVE•added 2006/12/07 1:28 a.m.•36 views

CVE-2006-6343

SQL injection vulnerability in polls.php in Neocrome Seditio 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

6.8CVSS8.4AI score0.00542EPSS