Vulnerabilities

TI-2009-03345 CVE-2009-3507 · GHSA-7399-c2fj-2jg3

Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers…

LOW 37

Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02346 Published 2009-10-01 No fix listed CWE-22

TI-2009-03344 CVE-2009-3506 · GHSA-qmm6-9733-43x2

Multiple cross-site scripting (XSS) vulnerabilities in CMSphp 0.21 allow remote attackers…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in CMSphp 0.21 allow remote attackers to inject arbitrary web script or HTML via the (1) cook_user parameter to index.php and the (2) name parameter to modules.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01271 Published 2009-10-01 No fix listed CWE-79

Vulnerabilities

Filters

Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers…

Multiple cross-site scripting (XSS) vulnerabilities in CMSphp 0.21 allow remote attackers…