contentkeeper technologies vulnerabilities

Products

• contentkeeper 1
• ContentKeeper Web Appliance 1
• Web Appliance 1

Latest contentkeeper technologies CVEs

Newest publication first

1. CVE-2009-20011 ContentKeeper Web Appliance < 125.10 RCE via mimencode

   Published 2025-08-30

   Critical·CVSS 10.0 EPSS 1.9% Framework module

   ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility. The vulnerability allows unauthenticated attackers to upload and execute arb...

2. CVE-2009-10005 ContentKeeper Web Appliance < 125.10 Arbitrary File Access via mimencode

   Published 2025-08-20

   High·CVSS 8.7 EPSS 1.2% Framework module

   ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 expose the mimencode binary via a CGI endpoint, allowing unauthenticated attackers to retrieve arbitrary files from the filesystem. By crafting a POST request to /cgi-bin/ck/mimencode with tr...

3. CVE-2006-5018 ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI.

   Published 2006-09-27

   Medium·CVSS 4.0 EPSS 2.2%

   ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.