Vulnerabilities (CVE)

Filtered by vendor Pragyan Cms Project Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-1480 1 Pragyan Cms Project 1 Pragyan Cms 2018-10-10 7.5 HIGH N/A
SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands via the fileget parameter in a view action and other unspecified vectors.
CVE-2015-1471 1 Pragyan Cms Project 1 Pragyan Cms 2015-02-13 7.5 HIGH N/A
SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI.
CVE-2012-6500 1 Pragyan Cms Project 1 Pragyan Cms 2013-01-23 5.0 MEDIUM N/A
Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the fileget parameter in a profile action to index.php.