icms content management systems vulnerabilities

Recent CVEs affecting icms content management systems products. 3 tracked.

icms content management systems has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-12-20. Highest priority: CVE-2005-4397 (score 43/100).

• CVE-2005-4397 HIGH 7.5 MITIGATE SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands vi
• CVE-2005-4396 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in admin/Default.asp in iCMS allows remote attackers to inject arbitr
• CVE-2005-3574 MEDIUM 5.0 MITIGATE PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include arbitrary files via t

FAQ

How do I fix icms content management systems vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is icms content management systems being exploited right now?

None of the tracked icms content management systems CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which icms content management systems CVE should I patch first?

CVE-2005-4397 currently ranks highest (43/100): SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands vi.

Products

• icms

RSS feed for icms content management systems · ← Back to latest CVEs