Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

havalite CVEs

Beta · best-effort

5 CVEs tagged to vendor havalite — 0 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filtersView vendor evidence profileExplore

CVE-2012-5919

Published Nov 19, 2012

Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) find or (2) replace fie…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2012-5894

Published Nov 17, 2012

SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the postId parameter.

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2012-5893

Published Nov 17, 2012

Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading a file with a .php;.gif…

CVSS 6.8 · Medium
Vendor/product tagsBeta · best-effort

CVE-2012-5892

Published Nov 17, 2012

Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the configuration databa…

CVSS 5.0 · Medium
Vendor/product tagsBeta · best-effort
Showing 1-5 of 5 CVEsPage 1 of 1