Approved changes feed: RSS · Atom
cpe:2.3:a:runcms:runcms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Runcms (74d91989-959c-5539-bcff-7e8ae2d195f1) |
|---|---|
| Product | Runcms (1a0473b9-5e9e-5841-b4a6-565178160276) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-1551 |
vulnerable | 2026-06-08 04:50:21.041859 |
Details available
SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Published: 2008-03-31T17:00:00.000Z
Updated: 2024-08-07T08:24:42.865Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1462 |
vulnerable | 2026-06-08 04:50:20.591109 |
Details available
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action.
Published: 2008-03-24T21:00:00.000Z
Updated: 2024-08-07T08:24:42.350Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6549 |
vulnerable | 2026-06-08 04:50:09.061743 |
Details available
Unspecified vulnerability in RunCMS before 1.6.1 has unknown impact and attack vectors, related to "pagetype using."
Published: 2007-12-28T00:00:00.000Z
Updated: 2024-08-07T16:11:06.002Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6548 |
vulnerable | 2026-06-08 04:50:09.061474 |
Details available
Multiple direct static code injection vulnerabilities in RunCMS before 1.6.1 allow remote authenticated administrators to inject arbitrary PHP code via the (1) header and (2) footer parameters to modules/system/admin.php in a meta-generator action, (3) the disclaimer parameter to modules/system/admin.php in a disclaimer action, (4) the disclaimer parameter to modules/mydownloads/admin/index.php in a mydownloadsConfigAdmin action, (5) the disclaimer parameter to modules/newbb_plus/admin/forum_config.php, (6) the disclaimer parameter to modules/mylinks/admin/index.php in a myLinksConfigAdmin action, or (7) the intro parameter to modules/sections/admin/index.php in a secconfig action, which inject PHP sequences into (a) sections/cache/intro.php, (b) mylinks/cache/disclaimer.php, (c) mydownloads/cache/disclaimer.php, (d) newbb_plus/cache/disclaimer.php, (e) system/cache/disclaimer.php, (f) system/cache/footer.php, (g) system/cache/header.php, or (h) system/cache/maintenance.php in modules/.
Published: 2007-12-28T00:00:00.000Z
Updated: 2024-08-07T16:11:06.026Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6547 |
vulnerable | 2026-06-08 04:50:09.061097 |
Details available
RunCMS before 1.6.1 does not require entry of the old password during a password change, which allows context-dependent attackers to change passwords upon obtaining temporary access to a session.
Published: 2007-12-28T00:00:00.000Z
Updated: 2024-08-07T16:11:05.972Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6546 |
vulnerable | 2026-06-08 04:50:09.060771 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6545 |
vulnerable | 2026-06-08 04:50:09.060377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2539 |
vulnerable | 2026-06-08 04:49:45.230102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2538 |
vulnerable | 2026-06-08 04:49:45.229711 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1793 |
vulnerable | 2026-06-08 04:48:58.048730 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0659 |
vulnerable | 2026-06-08 04:48:54.805603 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.