Tangocms

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Tangocms records in CISA KEV

No Tangocms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tangocms 3 records LOW

Records

3 records

TI-2008-05744 CVE-2008-6048 · GHSA-6f6v-xr97-pjpx

Multiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow…

LOW 27

Multiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow remote attackers to hijack the authentication of administrators.

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00479 Published 2009-02-04 No fix listed CWE-352

TI-2009-02266 CVE-2009-2376 · GHSA-5pv5-ffpr-6ccq

Cross-site scripting (XSS) vulnerability in the Html::textarea function in…

LOW 22

Cross-site scripting (XSS) vulnerability in the Html::textarea function in application/libraries/Html.php in TangoCMS 2.x before 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the value paramete…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01119 Published 2009-07-08 No fix listed CWE-79

TI-2009-00820 CVE-2009-0862 · GHSA-966f-qj79-3q6f

Cross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in…

LOW 22

Cross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x (aka Eagle) before 2.2.4 allows remote attackers to inject…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2009-03-10 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0