Vulnerabilities

TI-2008-06746 CVE-2008-7058 · GHSA-8p8h-qvx6-qcr7

Cross-site request forgery (CSRF) vulnerability in BandSite CMS 1.1.4 allows remote…

LOW 32

Cross-site request forgery (CSRF) vulnerability in BandSite CMS 1.1.4 allows remote attackers to hijack the authentication of administrators and force a logout via adminpanel/logout.php.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00941 Published 2009-08-24 No fix listed CWE-352

TI-2008-06745 CVE-2008-7057 · GHSA-9hrw-523q-wfrp

Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arbitrary HTML or web script via the type parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01453 Published 2009-08-24 No fix listed CWE-79

TI-2008-06744 CVE-2008-7056 · GHSA-99j4-643v-27p9

BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which…

LOW 28

BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtain copies of the database via a direct request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02459 Published 2009-08-24 No fix listed CWE-264

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in BandSite CMS 1.1.4 allows remote…

Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows…

BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which…