Skip to content
Noroxi

lovecms records

8 published records for vendor lovecms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    8 records
    • CVE-2008-5308
      32Monitor

      The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attac

      HighCVSS 7.5Proof of conceptEPSS 7%

      lovecms · the simple forumDec 2, 2008

    • CVE-2008-3509
      31Monitor

      LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in system/admin/, whic

      HighCVSS 7.5Proof of conceptEPSS 3%

      lovecms · lovecmsAug 7, 2008

    • CVE-2007-1148
      31Monitor

      PHP remote file inclusion vulnerability in install/index.php in LoveCMS 1.4 allows remote attackers to execute arbitrary PHP code via a URL

      HighCVSS 7.5Proof of conceptEPSS 3%

      lovecms · lovecmsMar 2, 2007

    • CVE-2008-7062
      29Monitor

      Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows remote attackers to

      MediumCVSS 6.8Proof of conceptEPSS 7%

      lovecms · lovecmsAug 25, 2009

    • CVE-2007-1149
      21Monitor

      Multiple directory traversal vulnerabilities in LoveCMS 1.4 allow remote attackers to read arbitrary files via a ..

      MediumCVSS 5.0Proof of conceptEPSS 4%

      lovecms · lovecmsMar 2, 2007

    • CVE-2008-5794
      21Monitor

      Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a

      MediumCVSS 5.0Proof of conceptEPSS 3%

      lovecms · lovecmsDec 31, 2008

    • CVE-2007-1151
      17Monitor

      Cross-site scripting (XSS) vulnerability in LoveCMS 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter

      MediumCVSS 4.3Proof of conceptEPSS 2%

      lovecms · lovecmsMar 2, 2007

    • CVE-2007-1150
      14Monitor

      Unrestricted file upload vulnerability in LoveCMS 1.4 allows remote authenticated administrators to upload arbitrary files to /modules/conte

      LowCVSS 3.6No exploitEPSS 1%

      lovecms · lovecmsMar 2, 2007