Skip to content
Noroxi

Havalite records

5 published records for vendor havalite.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2012-5894
    30Monitor

    SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via

    HighCVSS 7.5Proof of conceptEPSS 1%

    havalite · cmsNov 17, 2012

  • CVE-2012-5893
    28Monitor

    Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary cod

    MediumCVSS 6.8No exploitEPSS 2%

    havalite · cmsNov 17, 2012

  • CVE-2013-0161
    21Monitor

    Havalite CMS 1.1.7 has a stored XSS vulnerability

    MediumCVSS 5.4Proof of conceptEPSS 0%

    havalite · havaliteJan 29, 2020

  • CVE-2012-5892
    20Monitor

    Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attacke

    MediumCVSS 5.0No exploitEPSS 1%

    havalite · cmsNov 17, 2012

  • CVE-2012-5919
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or H

    MediumCVSS 4.3Proof of conceptEPSS 1%

    havalite · cmsNov 19, 2012