Grafxsoftware maintains a compact portfolio of web-development and site-building tools, including MiniCWB and Company Website Builder, with a durable signal centered on code-injection and cross-site scripting vulnerabilities arising from web-layer input handling. These weakness classes reflect the inherent risks of dynamic code generation and HTML templating in client-facing web applications; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Grafxsoftware over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-1809HIGH Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDE_PATH | Apr 2, 2007 | 7.5 | 36 | NO | YES |
CVE-2009-4693HIGH Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter to (1) en.inc.php, (2 | Mar 10, 2010 | 7.5 | 28 | NO | YES |
CVE-2008-6620MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in javascript/editor/editor/filemanager/browser/mcpuk/connectors/php/connector.php in GraFX miniCWB 2.1.1 and earlier allow remo | Apr 6, 2009 | 4.3 | 21 | NO | YES |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Grafxsoftware.
Media articles that mention a CVE ID that affects a product developed by Grafxsoftware — matched by CVE ID, not by vendor name.