Known Vulnerabilities for products from Squiz
Listed below are 10 of the newest known vulnerabilities associated with the vendor "Squiz".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-32277 json | ** DISPUTED ** Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly vali... | 5.3 - MEDIUM | 2022-09-06 | 2023-11-07 |
| CVE-2019-19374 json | An issue was discovered in core/assets/form/form_question_types/form_question_type_file_upload/form_question_type_file_upload... | 9.1 - CRITICAL | 2019-12-11 | 2020-08-24 |
| CVE-2019-19373 json | An issue was discovered in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3... | 7.5 - HIGH | 2019-12-11 | 2019-12-19 |
| CVE-2017-14198 json | An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit... | Not Provided | 2017-11-30 | 2025-04-20 |
| CVE-2017-14197 json | An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. There are multiple reflected Cross-Site Scri... | Not Provided | 2017-11-30 | 2025-04-20 |
| CVE-2017-14196 json | An issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3. An information disclosure caused by a Path T... | Not Provided | 2017-11-30 | 2025-04-20 |
| CVE-2010-4901 json | Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to injec... | Not Provided | 2011-10-08 | 2026-04-29 |
| CVE-2006-5037 json | MySource Matrix after 3.8 allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in th... | Not Provided | 2006-09-27 | 2026-04-23 |
| CVE-2006-5036 json | MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy server via ... | Not Provided | 2006-09-27 | 2026-04-23 |
| CVE-2006-4635 json | Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser... | 6.5 - MEDIUM | 2006-09-08 | 2017-07-20 |
Known software with vulnerabilities from Squiz
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Squiz | Matrix | 5.3.0.0 |
| Application | Squiz | Mysource Matrix | 3.28.3 |