Vulnerabilities

TI-2014-01630 CVE-2014-2069 · GHSA-8v54-89gr-p9gq

Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read…

MEDIUM 49

Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname in the file parameter to FileManager.aspx.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.15441 Published 2018-04-13 No fix listed CWE-22

TI-2010-03240 CVE-2010-3404 · GHSA-cqfp-9rxf-m432

Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote…

LOW 35

Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL commands via the (1) Criteria field in an unspecified form related to catlgsearch.aspx or (2) user n…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2010-09-16 No fix listed CWE-89

Vulnerabilities

Filters

Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read…

Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote…