W Cms

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-6523 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script or HTML via (1) the p parameter in the getMenus function in codes/wcms.php; or. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS W Cms

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

0.9%

CVE-2012-6522 MEDIUM POC THREAT This Month

Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01 allows remote attackers to read arbitrary files via a .. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 19.5%.

PHP Path Traversal W Cms

NVD Exploit-DB

CVSS 2.0

5.0

EPSS

19.5%

CVE-2012-6523

EPSS 1% CVSS 4.3

MEDIUM POC This Month

PHP XSS W Cms

NVD Exploit-DB

CVE-2012-6522

EPSS 19% CVSS 5.0

MEDIUM POC THREAT This Month

PHP Path Traversal W Cms

NVD Exploit-DB