Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
havalite cms vulnerabilities and exploits
(subscribe to this query)
755
VMScore
CVE-2012-5894
SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the postId parameter.
Havalite Cms
1 EDB exploit
435
VMScore
CVE-2012-5919
Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) find or (2) replace fields to havalite/findReplace.php; (3) username parameter to havalite/hava_login.php, (...
Havalite Cms
1 EDB exploit
445
VMScore
CVE-2012-5892
Havalite CMS 1.1.0 and previous versions stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download the configuration database via a direct request for data/havalite.db3.
Havalite Cms
605
VMScore
CVE-2012-5893
Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and previous versions allows remote malicious users to execute arbitrary code by uploading a file with a .php;.gif extension, then accessing it via a direct request to the file in tmp/files/.
Havalite Cms
355
VMScore
CVE-2013-0161
Havalite CMS 1.1.7 has a stored XSS vulnerability
Havalite Havalite 1.1.7
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002
CVE-2006-4304
CVE-2024-4336
CVE-2024-33437
CVE-2024-4340
CVE-2024-27956
privilege
insecure direct object reference
XSS
item search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started