Skip to content
Noroxi

plume-cms records

10 published records for vendor plume-cms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    10 records
    • CVE-2006-2645
      32Monitor

      PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to execute arbitrary code vi

      HighCVSS 7.5Proof of conceptEPSS 5%

      plume-cms · plume cmsMay 30, 2006

    • CVE-2006-4533
      31Monitor

      Multiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote attackers to execute arbitrary PHP code via t

      HighCVSS 7.5No exploitEPSS 4%

      plume-cms · plume cmsSep 1, 2006

    • CVE-2006-3562
      31Monitor

      PHP remote file inclusion vulnerabilities in plume cms 1.0.4 allow remote attackers to execute arbitrary PHP code via a URL in the _PX_confi

      HighCVSS 7.5Proof of conceptEPSS 3%

      plume-cms · plume cmsJul 12, 2006

    • CVE-2006-7021
      31Monitor

      PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers to execute arbitrary

      HighCVSS 7.5Proof of conceptEPSS 2%

      plume-cms · plume cmsFeb 14, 2007

    • CVE-2006-0725
      28Monitor

      PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when register_globals is enabled, allows remote attackers to incl

      MediumCVSS 6.8Proof of conceptEPSS 2%

      plume-cms · plume cmsFeb 16, 2006

    • CVE-2012-1414
      27Monitor

      Cross-site request forgery (CSRF) vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the aut

      MediumCVSS 6.8Proof of conceptEPSS 0%

      plume-cms · plume cmsOct 7, 2012

    • CVE-2009-3418
      26Monitor

      Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow (1) remote authenticated users to execute arbitrary SQL commands via the m p

      MediumCVSS 6.5Proof of conceptEPSS 0%

      plume-cms · plume cmsSep 25, 2009

    • CVE-2012-2156
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote attackers to inject arbitrary web script or

      MediumCVSS 4.3Proof of conceptEPSS 3%

      plume-cms · plume cmsApr 11, 2012

    • CVE-2008-1048
      17Monitor

      Cross-site scripting (XSS) vulnerability in manager/xmedia.php in Plume CMS 1.2.2 allows remote attackers to inject arbitrary web script or

      MediumCVSS 4.3No exploitEPSS 1%

      plume-cms · plume cmsFeb 27, 2008

    • CVE-2011-3985
      10Monitor

      Cross-site scripting (XSS) vulnerability in Plume before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecifie

      LowCVSS 2.6No exploitEPSS 1%

      plume-cms · plume cmsNov 9, 2011