Vulnerabilities

TI-2008-01892 CVE-2008-1969 · GHSA-553h-hp7x-hmwm

Multiple cross-site scripting (XSS) vulnerabilities in Cezanne 6.5.1 and 7 allow remote…

LOW 19

Multiple cross-site scripting (XSS) vulnerabilities in Cezanne 6.5.1 and 7 allow remote attackers to inject arbitrary web script or HTML via the (1) LookUPId and (2) CbFun parameters to (a) CFLookUP.asp; (3) TitleParms,…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01307 Published 2008-04-27 No fix listed CWE-79

TI-2008-01891 CVE-2008-1968 · GHSA-jwjc-hwxr-wmx9

Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to…

LOW 28

Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to execute arbitrary SQL commands via the FUNID parameter to (1) CFLookup.asp and (2) CznCommon/CznCustomContainer.asp.

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00832 Published 2008-04-27 No fix listed CWE-89

TI-2008-01890 CVE-2008-1967 · GHSA-w6wv-6f7r-72hq

Cross-site scripting (XSS) vulnerability in CFLogon/CFLogon.asp in Cezanne 6.5.1 and 7…

LOW 23

Cross-site scripting (XSS) vulnerability in CFLogon/CFLogon.asp in Cezanne 6.5.1 and 7 allows remote attackers to inject arbitrary web script or HTML via the SleUserName parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01507 Published 2008-04-27 No fix listed CWE-79

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in Cezanne 6.5.1 and 7 allow remote…

Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to…

Cross-site scripting (XSS) vulnerability in CFLogon/CFLogon.asp in Cezanne 6.5.1 and 7…