Apprain

Apprain

37 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-41033

  • EPSS 0.04%
  • Veröffentlicht 04.09.2025 11:06:38
  • Zuletzt bearbeitet 04.09.2025 18:45:25

An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BPage%5D%5Bname%5D' parameter in /apprain/page/manage-dynamic-pages/cre...

9.8

CVE-2025-41032

  • EPSS 0.04%
  • Veröffentlicht 04.09.2025 11:06:27
  • Zuletzt bearbeitet 04.09.2025 18:45:32

An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BAdmin%5D%5Busername%5D' parameter in /apprain/admin/manage/add/.

7.5

CVE-2013-6058

Exploit
  • EPSS 4.61%
  • Veröffentlicht 14.11.2013 20:55:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

SQL injection vulnerability in appRain CMF 3.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to blog-by-cat/.

7.5

CVE-2011-5229

Exploit
  • EPSS 1.14%
  • Veröffentlicht 25.10.2012 17:55:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote attackers to execute arbitrary SQL commands via the PATH_INFO.

4.3

CVE-2011-5228

Exploit
  • EPSS 4.67%
  • Veröffentlicht 25.10.2012 17:55:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the Search module (quickstart/search) in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss parameter.

6.8

CVE-2012-1153

Exploit
  • EPSS 79.54%
  • Veröffentlicht 06.10.2012 21:55:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to th...

5

CVE-2011-3704

Exploit
  • EPSS 0.28%
  • Veröffentlicht 23.09.2011 23:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

appRain 0.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by cron.php.