Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Apprain

First CVE: Sep 23, 2011Active for: 15 yearsTotal CVEs: 38
32.3
VTI Score
Medium

Apprain is a modestly represented vendor whose vulnerability exposure concentrates in a single, widely deployed application product; despite a narrow product footprint, the vendor ranks among the more prominent in the landscape. Vulnerabilities affecting Apprain skew toward serious outcomes with a meaningful share reaching critical severity, and the disclosure history shows a notable tendency toward public exploit code availability. The exposure recurs through application-layer weakness classes including cross-site scripting, SQL injection, path traversal, and information disclosure—patterns endemic to web-facing software where input validation and access control shortfalls propagate directly to end users. Defenders should treat Apprain application instances as high-priority for patching, particularly in internet-facing contexts. Current exploitation activity and exposure counts are shown alongside this summary.

FAUCET AI Generated
38
Total CVEs
More Total CVEs than 98% of tracked vendors
9.5
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 99% of tracked vendors
6.0
Avg CVSS Score
Higher Avg CVSS Score than 29% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Apprain over time

Volume of CVEsAvg CVSS Base Score
First CVE
Sep 23, 2011
14 years ago
Most Recent CVE
Dec 10, 2025
226 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (38 CVEs).

38 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2012-1153MEDIUM
Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with
Oct 6, 20126.856NOYES
CVE-2025-41033CRITICAL
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5B
Sep 4, 20259.833NONO
CVE-2011-5229HIGH
SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote attackers to execute arbitrary SQL commands via the PATH_INFO.
Oct 25, 20127.532NOYES
CVE-2024-58279HIGH
appRain CMF 4.0.5 contains an authenticated remote code execution vulnerability that allows administrative users to upload malicious PHP files through the filemanager upload endpoi
Dec 10, 20258.828NONO
CVE-2013-6058HIGH
SQL injection vulnerability in appRain CMF 3.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to blog-by-cat/.
Nov 14, 20137.528NOYES
CVE-2025-41034CRITICAL
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5B
Sep 4, 20259.827NONO
CVE-2025-41032CRITICAL
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5B
Sep 4, 20259.827NONO
CVE-2011-5228MEDIUM
Cross-site scripting (XSS) vulnerability in the Search module (quickstart/search) in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss par
Oct 25, 20124.325NOYES
CVE-2025-41035MEDIUM
A problem has been discovered in appRain CMF 4.0.5. An authenticated Path Traversal vulnerability in /apprain/common/download/ allows remote users to bypass the intended SecurityMa
Sep 4, 20256.522NONO
CVE-2025-41061MEDIUM
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[Addon
Sep 4, 20255.420NONO
View all 38 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products38 CVEs
84%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network33 (86.8%)
Unknown5 (13.2%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low33 (86.8%)
High0 (0.0%)
Unknown5 (13.2%)
User Interaction
None5 (13.2%)
Unknown5 (13.2%)
Required28 (73.7%)
Privileges Required
Low30 (78.9%)
High0 (0.0%)
None3 (7.9%)
Unknown5 (13.2%)

Exploit Exposure

Signals from CVEs in this vendor scope (38 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
2.6% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
4 CVEs
10.5% of CVEs· 76th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Apprain.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Apprain — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Apprain's Products

View all 4 CNAs →

Top CWEs