runcms runcms

Name: runcms runcms
Brand: runcms

productUS

cpe:2.3:a:runcms:runcms:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical14high16medium1low

updated 2026-10-27

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2005-0828US	medium5.0	9.18% (95th)	Exploit	no fix	2005-05-02	= 1.1a
CVE-2007-2539US	high7.8	7.91% (95th)	Exploit	no fix	2007-05-09	≤ 1.5.2
CVE-2007-6548US	high7.5	7.77% (95th)	Exploit	no fix	2007-12-28	≤ 1.6
CVE-2007-2538US	high7.5	4.83% (92nd)	Exploit	no fix	2007-05-09	≤ 1.5.2
CVE-2007-6544US	high7.5	4.26% (91st)	Exploit	no fix	2007-12-28	= 1.6
CVE-2007-6545US	medium4.3	4.11% (91st)	Exploit	no fix	2007-12-28	≤ 1.6
CVE-2006-0659US	medium6.8	4.09% (91st)	Exploit	no fix	2006-02-13	3 versions
CVE-2006-1793US	high7.6	3.65% (90th)	Exploit	no fix	2006-04-17	3 versions
CVE-2006-0875US	medium5.0	2.94% (87th)	Exploit	no fix	2006-02-24	6 versions
CVE-2007-6546US	medium6.4	2.70% (86th)	Exploit	no fix	2007-12-28	≤ 1.6
CVE-2008-3354US	high7.5	2.54% (85th)	Exploit	no fix	2008-07-28	= 1.6.1
CVE-2007-6547US	medium6.8	2.41% (84th)	Exploit	no fix	2007-12-28	≤ 1.6
CVE-2008-0224US	high7.5	2.00% (81st)	Exploit	no fix	2008-01-10	3 versions
CVE-2006-1216US	medium4.3	1.98% (80th)	Exploit	no fix	2006-03-14	6 versions
CVE-2006-0721US	high7.5	1.75% (78th)	Exploit	no fix	2006-02-16	3 versions
CVE-2008-7222US	medium4.3	1.45% (73rd)	Exploit	no fix	2009-09-14	= 1.6.1
CVE-2008-1551US	high7.5	0.97% (62nd)	Exploit	no fix	2008-03-31	—
CVE-2008-1462US	medium6.8	0.91% (60th)	Exploit	no fix	2008-03-24	—
CVE-2009-3804US	medium6.5	0.81% (57th)	Exploit	no fix	2009-10-27	= 2m1
CVE-2006-4667US	high7.5	2.57% (85th)	—	no fix	2006-09-09	= 1.4.1
CVE-2005-2691US	high7.5	2.32% (83rd)	—	no fix	2005-08-24	3 versions
CVE-2007-5535US	high10.0	1.54% (75th)	—	no fix	2007-10-18	= 1.5.2
CVE-2005-0827US	medium5.0	1.39% (72nd)	—	no fix	2005-05-02	= 1.1a
CVE-2005-1031US	medium5.0	1.35% (71st)	—	no fix	2005-05-02	2 versions
CVE-2005-2692US	high7.5	1.21% (68th)	—	no fix	2005-08-24	3 versions
CVE-2009-3815US	medium5.0	1.14% (66th)	—	no fix	2009-10-27	= 2m1
CVE-2007-6549US	high7.5	1.13% (66th)	—	no fix	2007-12-28	≤ 1.6
CVE-2010-2852US	low2.6	1.10% (65th)	—	no fix	2010-07-25	= 2.1
CVE-2009-3814US	medium6.5	1.07% (65th)	—	no fix	2009-10-27	= 2m1
CVE-2009-3813US	medium6.5	0.90% (59th)	—	no fix	2009-10-27	= 2m1
CVE-2008-7221US	medium6.8	0.62% (49th)	—	no fix	2009-09-14	= 1.6.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')10 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')4 CVEs
CWE-284Improper Access Control2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan