Plume Cms@* Security Vulnerabilities and Issues — Plume Cms@* CVE List

Lucene search

Plume-cmsPlume Cms*

4 matches found

CVE•added 2006/09/01 11:4 p.m.•38 views

CVE-2006-4533

Multiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote attackers to execute arbitrary PHP code via the _PX_config[manager_path] parameter to (1) articles.php, (2) categories.php, (3) news.php, (4) prefs.php, (5) sites.php, (6) subtypes.php, (7) users.php, (8)...

7.5CVSS7.4AI score0.05325EPSS

CVE•added 2012/04/11 10:39 a.m.•37 views

CVE-2012-2156

Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the u_email parameter (aka Authors Email field) to manager/users.php, (2) the u_realname parameter (aka Authors Name field) to manager/users.php, ...

4.3CVSS5.8AI score0.03123EPSS

CVE•added 2011/11/09 11:55 p.m.•33 views

CVE-2011-3985

Cross-site scripting (XSS) vulnerability in Plume before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

2.6CVSS5.8AI score0.00318EPSS

CVE•added 2012/10/07 9:55 p.m.•30 views

CVE-2012-1414

Cross-site request forgery (CSRF) vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action.

6.8CVSS7.3AI score0.00211EPSS