GCVE - cpe:2.3:a:runcms:runcms:1.6.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:runcms:runcms:1.6.1:*:*:*:*:*:*:*

part: a version: 1.6.1 update: *

Vendor	Runcms (`74d91989-959c-5539-bcff-7e8ae2d195f1`)
Product	Runcms (`1a0473b9-5e9e-5841-b4a6-565178160276`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-7222`	vulnerable	2026-06-08 04:51:06.011870	Details available Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the rank_title parameter in a RankForumAdd action. Published: 2009-09-14T14:00:00.000Z Updated: 2024-08-07T11:56:14.499Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/488287/100/200/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/40630 http://www.securityfocus.com/bid/27852	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-7221`	vulnerable	2026-06-08 04:51:06.011462	Details available Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of administrators for requests that (1) add new administrators or (2) modify user profiles via a crafted request to system/admin.php. Published: 2009-09-14T14:00:00.000Z Updated: 2024-08-07T11:56:14.483Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/488287/100/200/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/40628	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3354`	vulnerable	2026-06-08 04:50:34.359518	Details available Multiple PHP remote file inclusion vulnerabilities in the Newbb Plus (newbb_plus) module 0.93 in RunCMS 1.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) bbPath[path] parameter to votepolls.php and the (2) bbPath[root_theme] parameter to config.php, different vectors than CVE-2006-0659. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2008-07-28T17:00:00.000Z Updated: 2024-08-07T09:37:26.828Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/30331 https://exchange.xforce.ibmcloud.com/vulnerabilities/43969 http://www.securityfocus.com/bid/30331/exploit	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0224`	vulnerable	2026-06-08 04:50:10.520991	Details available SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip parameter. Published: 2008-01-10T23:00:00.000Z Updated: 2024-08-07T07:39:34.653Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/39478 http://www.securityfocus.com/bid/27152 https://www.exploit-db.com/exploits/4845 http://secunia.com/advisories/28340	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.