Sploitus

25 exploited vulnerabilities in Runcms

Vulnerabilities with publicly known exploits

Vendors
Runcms, Runcms Team, Ciamos, Exoops
With known exploits
25
Affected Runcms versions
All versions
Affected Runcms Newbb Plus Module versions
= 0.93
Affected Myarticles versions
= 0.6
Affected Runcms Myarticles Module versions
= 0.6
Affected Runcms Myannonces versions
All versions
Affected Ciamos versions
= 0.9.2_rc1
Affected E-xoops versions
= 1.05r3

Vulnerabilities with exploits

Highest CVSS first — 20 of these already have exploit code on Sploitus

CVE-2007-2539 1 exploit
CVSS 7.8 HIGH 2007-05-09FIX AVAILABLE
RunCMS 1.5.2 - 'debug_show.php' SQL Injection
CVE-2006-1793 1 exploit
CVSS 7.6 HIGH 2006-04-17FIX AVAILABLE
RunCMS 1.2 - 'class.forumposts.php' Remote File Inclusion
CVE-2008-3354 2 exploits
CVSS 7.5 HIGH 2008-07-28
RunCMS 1.6.1 - 'bbPath[path]' Remote File InclusionRunCMS 1.6.1 - 'bbPath[root_theme]' Remote File Inclusion
CVE-2008-2084 1 exploit
CVSS 7.5 HIGH 2008-05-05FIX AVAILABLE
RunCMS Module MyArticles 0.6 Beta-1 - SQL Injection
CVE-2008-0878 1 exploit
CVSS 7.5 HIGH 2008-02-21FIX AVAILABLE
RunCMS Module MyAnnonces - 'cid' SQL Injection
CVE-2008-0224 1 exploit
CVSS 7.5 HIGH 2008-01-10
RunCMS Newbb_plus 0.92 - Client IP SQL Injection
CVE-2007-6548 1 exploit
CVSS 7.5 HIGH 2007-12-28FIX AVAILABLE
RunCMS 1.6 - Multiple Vulnerabilities
CVE-2007-6544 2 exploits
CVSS 7.5 HIGH 2007-12-28FIX AVAILABLE
RunCMS 1.6 - Blind SQL Injection (IDS Evasion)RunCMS 1.6 - Get Admin Cookie Blind SQL Injection
CVE-2007-2538 1 exploit
CVSS 7.5 HIGH 2007-05-09
RunCMS 1.5.2 - 'debug_show.php' SQL Injection
CVE-2006-0721 1 exploit
CVSS 7.5 HIGH 2006-02-16
RunCMS 1.2/1.3 - 'PMLite.php' SQL Injection
CVE-2005-2692
CVSS 7.5 HIGH 2005-08-24FIX AVAILABLE
CVE-2008-1462 1 exploit
CVSS 6.8 MEDIUM 2008-03-24
RunCMS Module section - 'artid' SQL Injection
CVE-2007-6547 1 exploit
CVSS 6.8 MEDIUM 2007-12-28FIX AVAILABLE
RunCMS 1.6 - Multiple Vulnerabilities
CVE-2006-0659 1 exploit
CVSS 6.8 MEDIUM 2006-02-13FIX AVAILABLE
RunCMS 1.2 - 'class.forumposts.php' Remote File Inclusion
CVE-2009-3814
CVSS 6.5 MEDIUM 2009-10-27FIX AVAILABLE
CVE-2009-3813
CVSS 6.5 MEDIUM 2009-10-27FIX AVAILABLE
CVE-2009-3804 2 exploits
CVSS 6.5 MEDIUM 2009-10-27
RunCMS 2m1 - 'store()' SQL InjectionRunCMS - 'forum' SQL Injection
CVE-2007-6546 1 exploit
CVSS 6.4 MEDIUM 2007-12-28FIX AVAILABLE
RunCMS 1.6 - Multiple Vulnerabilities
CVE-2009-3815
CVSS 5.0 MEDIUM 2009-10-27FIX AVAILABLE
CVE-2006-0875 1 exploit
CVSS 5.0 MEDIUM 2006-02-24FIX AVAILABLE
RunCMS 1.x - 'Ratefile.php' Cross-Site Scripting
CVE-2005-0828 1 exploit
CVSS 5.0 MEDIUM 2005-03-22FIX AVAILABLE
RunCMS 1.1 - Database Configuration Information Disclosure
CVE-2008-7222 1 exploit
CVSS 4.3 MEDIUM 2009-09-14FIX AVAILABLE
RunCMS 1.6.1 - 'admin.php' Cross-Site Scripting
CVE-2007-6545 1 exploit
CVSS 4.3 MEDIUM 2007-12-28FIX AVAILABLE
RunCMS 1.6 - Multiple Vulnerabilities
CVE-2006-1216 1 exploit
CVSS 4.3 MEDIUM 2006-03-14FIX AVAILABLE
RunCMS 1.x - 'Bigshow.php' Cross-Site Scripting
CVE-2010-2852
CVSS 2.6 LOW 2010-07-23FIX AVAILABLE