Pragyan CMS Project
Pragyan CMS Project Pragyan CMS: vulnerabilities and CVEs
Pragyan CMS Project Pragyan CMS has 6 published vulnerabilities, 0 of them in the last 12 months. 1 are rated critical and 0 are listed by CISA as actively exploited.
CVEs6
Last 12 months0
Critical1
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-14601 | Medium (4.9) | 1.2% | — | Sep 19, 2017 | Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $_GET['forwhat'], resulting in Information Disclosure. |
| CVE-2017-14600 | Medium (4.9) | 1.2% | — | Sep 19, 2017 | Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $_GET['del_black'], resulting in Information Disclosure. |
| CVE-2015-4627 | Critical (9.8) | 1.0% | — | Sep 7, 2017 | SQL injection vulnerability in Pragyan CMS 3.0. |
| CVE-2015-1471 | High (7.5) | 3.8% | — | Feb 12, 2015 | SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI. |
| CVE-2012-6500 | Medium (5) | 3.4% | — | Jan 12, 2013 | Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the fileget parameter in a profile action to index.php. |
| CVE-2009-1480 | High (7.5) | 0.99% | — | Apr 29, 2009 | SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands via the fileget parameter in a view action and other unspecified vectors. |