CVE-2005-4006: Redgraphic Sapid CMS

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

SAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct requests to the usr/system files (1) insert_file.php, (2) insert_image.php, (3) insert_link.php, (4) insert_qcfile.php, and (5) edit.php.

Affected products

• Redgraphic Sapid CMS: up to and including 1.2.3.02; version 1.2.3 only

Published 2005-12-05. Last modified 2026-06-16.