Vendor/product archive

havalite / cms CVEs

Beta · best-effort

4 CVEs tagged to havalite / cms — 0 Critical, 1 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to havalite vendor archive

CVE-2012-5919

Published Nov 19, 2012

Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) find or (2) replace fie…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2012-5894

Published Nov 17, 2012

SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the postId parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2012-5893

Published Nov 17, 2012

Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading a file with a .php;.gif…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2012-5892

Published Nov 17, 2012

Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the configuration databa…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1