Skip to content
Noroxi

grayscalecms records

3 published records for vendor grayscalecms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    3 records
    • CVE-2008-7058
      27Monitor

      Cross-site request forgery (CSRF) vulnerability in BandSite CMS 1.1.4 allows remote attackers to hijack the authentication of administrators

      MediumCVSS 6.8Proof of conceptEPSS 0%

      grayscalecms · bandsite cmsAug 24, 2009

    • CVE-2008-7056
      21Monitor

      BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtain copies of the datab

      MediumCVSS 5.0Proof of conceptEPSS 2%

      grayscalecms · bandsite cmsAug 24, 2009

    • CVE-2008-7057
      17Monitor

      Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arbitrary HTML or web sc

      MediumCVSS 4.3Proof of conceptEPSS 1%

      grayscalecms · bandsite cmsAug 24, 2009