Vulnerabilities

3 records

Sort

Vendor: Ariadne Component: Ariadne Cms Clear all filters

TI-2007-02350 CVE-2007-2433 · GHSA-v9v7-xmqp-c9gw

Cross-site scripting (XSS) vulnerability in index.php in Ariadne 2.4.1 allows remote…

LOW 34

Cross-site scripting (XSS) vulnerability in index.php in Ariadne 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the ARLogin parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01837 Published 2007-05-02 No fix listed

TI-2006-05560 CVE-2006-5776 · GHSA-pqpq-74m3-r29f

Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute…

LOW 37

Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PHP code via the ariadne parameter in (1) ftp/loader.php and (2) lib/includes/loader.cmd.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0195 Published 2006-11-07 No fix listed

TI-2005-01119 CVE-2005-1181 · GHSA-575q-9839-6qf6

NOTE: this issue has been disputed by the vendor.

LOW 38

NOTE: this issue has been disputed by the vendor.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02523 Published 2005-04-19 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in index.php in Ariadne 2.4.1 allows remote…

Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute…

NOTE: this issue has been disputed by the vendor.