Haudenschilt

Family Connections Cms

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2012-0699

Exploit
  • EPSS 0.55%
  • Veröffentlicht 11.01.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 01:35:34

Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (1) add news via an add action to familynews.php ...

6.8

CVE-2011-5130

Exploit
  • EPSS 74.51%
  • Veröffentlicht 30.08.2012 22:55:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter.

7.5

CVE-2010-3419

Exploit
  • EPSS 0.94%
  • Veröffentlicht 16.09.2010 22:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote attackers to execute arbitrary PHP code via a URL in the current_user_id parameter to (1) familynews.php and (2) settings.php.

6.5

CVE-2009-2010

Exploit
  • EPSS 0.3%
  • Veröffentlicht 08.06.2009 19:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) thread parameter to messageboard.php, (2) member parameter to profile....

6.5

CVE-2008-2901

Exploit
  • EPSS 0.41%
  • Veröffentlicht 30.06.2008 18:24:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.4 allow remote authenticated users to execute arbitrary SQL commands via the (1) address parameter to addressbook.php, the (2) getnews parameter to familynews.php,...

10

CVE-2007-4338

Exploit
  • EPSS 31.99%
  • Veröffentlicht 14.08.2007 18:17:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

index.php in Ryan Haudenschilt Family Connections (FCMS) before 0.9 allows remote attackers to access an arbitrary account by placing the account's name in the value of an fcms_login_id cookie. NOTE: this can be leveraged for code execution via a PO...