Grafx Software maintains a website-builder product with a modest vulnerability profile centered on the web-application domain. The observed weakness classes reflect the input-handling and data-management challenges typical of content-management and site-building platforms; current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Grafx Software over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-1809HIGH Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDE_PATH | Apr 2, 2007 | 7.5 | 36 | NO | YES |
CVE-2009-4693HIGH Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter to (1) en.inc.php, (2 | Mar 10, 2010 | 7.5 | 28 | NO | YES |
CVE-2008-6620MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in javascript/editor/editor/filemanager/browser/mcpuk/connectors/php/connector.php in GraFX miniCWB 2.1.1 and earlier allow remo | Apr 6, 2009 | 4.3 | 21 | NO | YES |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Grafx Software.
Media articles that mention a CVE ID that affects a product developed by Grafx Software — matched by CVE ID, not by vendor name.