Plume Cms Security Vulnerabilities and Issues — Plume Cms CVE List

Lucene search

Plume-cmsPlume Cms

4 matches found

CVE•added 2006/05/30 10:2 a.m.•44 views

CVE-2006-2645

PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to execute arbitrary code via a URL in the _PX_config[manager_path] parameter. NOTE: this is a different executable and affected version than CVE-2006-0725.

7.5CVSS7.6AI score0.05325EPSS

CVE•added 2006/02/16 11:2 a.m.•42 views

CVE-2006-0725

PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the _PX_config[manager_path] parameter. NOTE: this is a different executable and affected version than CVE-2006-2645.

6.8CVSS6.6AI score0.05325EPSS

CVE•added 2006/09/01 11:4 p.m.•38 views

CVE-2006-4533

Multiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote attackers to execute arbitrary PHP code via the _PX_config[manager_path] parameter to (1) articles.php, (2) categories.php, (3) news.php, (4) prefs.php, (5) sites.php, (6) subtypes.php, (7) users.php, (8)...

7.5CVSS7.4AI score0.05325EPSS

CVE•added 2006/07/13 1:5 a.m.•35 views

CVE-2006-3562

PHP remote file inclusion vulnerabilities in plume cms 1.0.4 allow remote attackers to execute arbitrary PHP code via a URL in the _PX_config[manager_path] parameter to (1) index.php, (2) rss.php, or (3) search.php, a different set of vectors and versions than CVE-2006-2645 and CVE-2006-0725.

7.5CVSS7.6AI score0.05325EPSS