Vulnerabilities

TI-2012-02520 CVE-2012-2906 · GHSA-8crx-gwv5-ffh5

Multiple cross-site scripting (XSS) vulnerabilities in artpublic/recommandation/index.php…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in artpublic/recommandation/index.php in Artiphp CMS 5.5.0 Neo (r422) allow remote attackers to inject arbitrary web script or HTML via the (1) add_img_name_post, (2) a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01991 Published 2012-05-21 No fix listed CWE-79

TI-2012-02519 CVE-2012-2905 · GHSA-c4fx-hc5m-2fq7

Artiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web…

LOW 28

Artiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03077 Published 2012-05-21 No fix listed CWE-264

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in artpublic/recommandation/index.php…

Artiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web…