Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
havalite vulnerabilities and exploits
(subscribe to this query)
355
VMScore
CVE-2013-0161
Havalite CMS 1.1.7 has a stored XSS vulnerability
Havalite Havalite 1.1.7
1 EDB exploit
445
VMScore
CVE-2012-5892
Havalite CMS 1.1.0 and previous versions stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download the configuration database via a direct request for data/havalite.db3.
Havalite Cms
755
VMScore
CVE-2012-5894
SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the postId parameter.
Havalite Cms
1 EDB exploit
435
VMScore
CVE-2012-5919
Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) find or (2) replace fields to havalite/findReplace.php; (3) username parameter to havalite/hava_login.php, (...
Havalite Cms
1 EDB exploit
605
VMScore
CVE-2012-5893
Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and previous versions allows remote malicious users to execute arbitrary code by uploading a file with a .php;.gif extension, then accessing it via a direct request to the file in tmp/files/.
Havalite Cms
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32744
privilege escalation
CVE-2024-30253
CVE-2024-3914
cross-site scripting
CVE-2024-31497
CVE-2024-3400
CVE-2024-32341
hardcoded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started