Vulnerabilities

TI-2010-02340 CVE-2010-2437 · GHSA-p7rv-pxf2-6jmq

Cross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and…

LOW 23

Cross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the comment variable to modules/blog/index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01452 Published 2010-06-24 No fix listed CWE-79

TI-2010-02339 CVE-2010-2436 · GHSA-44jj-9jpw-493g

SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly…

LOW 35

SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00971 Published 2010-06-24 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and…

SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly…