Skip to content
Noroxi

etomite records

8 published records for vendor etomite.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    8 records
    • CVE-2006-7070
      31Monitor

      Unrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite CMS 0.6.1 and earlier allows remote attackers

      HighCVSS 7.5Proof of conceptEPSS 4%

      etomite · etomiteMar 2, 2007

    • CVE-2006-0325
      31Monitor

      Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, co

      HighCVSS 7.5No exploitEPSS 3%

      etomite · etomiteJan 20, 2006

    • CVE-2006-5242
      30Monitor

      SQL injection vulnerability in Etomite Content Management System (CMS) before 0.6.1.1 allows remote attackers to execute arbitrary SQL comma

      HighCVSS 7.5No exploitEPSS 1%

      etomite · etomiteOct 11, 2006

    • CVE-2006-3904
      28Monitor

      SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magic_quotes_gpc disabled, allows remote attackers t

      MediumCVSS 6.8Proof of conceptEPSS 1%

      etomite · etomiteJul 27, 2006

    • CVE-2006-6048
      27Monitor

      SQL injection vulnerability in index.php in Etomite CMS 0.6.1.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbit

      MediumCVSS 6.8No exploitEPSS 1%

      etomite · etomiteNov 21, 2006

    • CVE-2006-6047
      25Monitor

      Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to include and execute

      MediumCVSS 5.8Proof of conceptEPSS 8%

      etomite · etomiteNov 21, 2006

    • CVE-2008-0820
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php in Etomite 0.6.1.4 Final allows remote attackers to inject arbitrary web script or HTM

      MediumCVSS 4.3No exploitEPSS 1%

      etomite · etomiteFeb 19, 2008

    • CVE-2011-4264
      17Monitor

      Cross-site scripting (XSS) vulnerability in Etomite before 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecifie

      MediumCVSS 4.3No exploitEPSS 0%

      etomite · etomiteDec 8, 2011