CVE Browser
Search and filter CVEs by severity, ecosystem, EPSS score, and more.
Page 1
CVE-2012-1901 MEDIUM
Multiple cross-site request forgery (CSRF) vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to (1) hijack the authentication of users for re…
CVSS 6.8 EPSS 1.23% Sep 18, 2012
CVE-2009-1256 HIGH
SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are…
CVSS 7.5 EPSS 1.00% Apr 7, 2009
CVE-2009-0534 HIGH
SQL injection vulnerability in FlexCMS allows remote attackers to execute arbitrary SQL commands via the catId parameter.
CVSS 7.5 EPSS 1.00% Feb 11, 2009
CVE-2008-3715 LOW
Cross-site scripting (XSS) vulnerability in inc-core-admin-editor-previouscolorsjs.php in the FlexCMS 2.5 and earlier, when register_globals is enabled, allows…
CVSS 2.6 EPSS 1.56% Aug 19, 2008
Showing 1 to 4 CVEs · page 1