← Back

Eshtery Cms

eshtery_cms

Vendor: Eshtery.she7ata • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-2069
1Eshtery.she7ata
1Eshtery Cms
Nov 21, 2024
Apr 16, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname in the file parameter to FileManager.aspx.
CVE-2010-3404
1Eshtery.she7ata
1Eshtery Cms
Apr 29, 2026
Sep 16, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL commands via the (1) Criteria field in an unspecified form related to catlgsearch.aspx or (2) user n...Show more
Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL commands via the (1) Criteria field in an unspecified form related to catlgsearch.aspx or (2) user name to an unspecified form related to adminlogin.aspx.Show less