← Back

Vigilecms

vigilecms

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Vigilecms
vigilecms
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-6087
1Vigilecms
1Vigilecms
Apr 23, 2026
Nov 22, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote attackers to change the admin password via certain parameters to the changepass module.
CVE-2007-6086
1Vigilecms
1Vigilecms
Apr 23, 2026
Nov 22, 2007
N/A· v4
N/A· v3
9.3 HIGH· v2
Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the module parameter.
CVE-2007-6085
1Vigilecms
1Vigilecms
Apr 23, 2026
Nov 22, 2007
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the (1) vedipm or (2) live_chat module.