Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Flyspeck Subscribe
Filtered by product Flyspeck Cms
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-1770 1 Flyspeck 1 Flyspeck Cms 2017-09-28 7.5 HIGH N/A
Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.
CVE-2009-1771 1 Flyspeck 1 Flyspeck Cms 2017-09-28 7.5 HIGH N/A
index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, which allows remote attackers to create or modify admin accounts via the (1) users[fullname], (2) users[email], (3) users[role_id], (4) users[username], and (5) users[password] parameters.