Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

CVE-2010-2018

Directory traversal vulnerability in downlot.php in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed
Vendors
Bukulokomedia
Products
Lokomedia Cms
CVE-2010-2019

SQL injection vulnerability in downlot.php in Lokomedia CMS 1.4.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the file parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Bukulokomedia
Products
Lokomedia Cms
CVE-2010-2017

Cross-site scripting (XSS) vulnerability in hasil-pencarian.html in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to inject arbitrary web script or HTML via the kata parameter. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Bukulokomedia
Products
Lokomedia Cms