Some vulnerabilities have been reported in RunCms, two of which have unknown impact and others, which can be exploited by malicious users to conduct script insertion attacks and to compromise a vulnerable system, and by malicious people to conduct cross-site scripting attacks and SQL injection attacks.