Vulnerabilities

TI-2014-07660 CVE-2014-9433 · GHSA-2rh2-h4h3-63w4

Multiple cross-site scripting (XSS) vulnerabilities in cms/front_content.php in Contenido…

LOW 17

Multiple cross-site scripting (XSS) vulnerabilities in cms/front_content.php in Contenido before 4.9.6, when advanced mod rewrite (AMR) is disabled, allow remote attackers to inject arbitrary web script or HTML via the (…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02085 Published 2014-12-31 No fix listed CWE-79

TI-2008-02785 CVE-2008-2911 · GHSA-674g-c7wh-2qvj

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Contenido 4.8.4 allow…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject arbitrary web script or HTML via the (1) contenido, (2) Belang, and (3) username parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01501 Published 2008-06-30 No fix listed CWE-79

TI-2006-05193 CVE-2006-5381 · GHSA-mwh4-fpf8-78h5

Contenido CMS stores sensitive data under the web root with insufficient access control…

LOW 25

Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other information via a direct request to (1) db_msql.inc, (2) db_…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01162 Published 2006-10-18 No fix listed

TI-2006-05192 CVE-2006-5380 · GHSA-42q3-f5fp-gpxr

Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute…

LOW 36

Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute arbitrary PHP code via a URL in the contenido_path parameter to (1) cms/dbfs.php or (2) cms/front_content.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01608 Published 2006-10-18 No fix listed

TI-2005-03887 CVE-2005-4132 · GHSA-hjg4-m8gp-mxjw

Unspecified "security leak" vulnerability in Contenido before 4.6.4, when…