Vulnerabilities

TI-2008-06750 CVE-2008-7062 · GHSA-rjjh-fj2r-6vjq

Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0…

MEDIUM 40

Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then ac…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0672 Published 2009-08-25 No fix listed CWE-264

TI-2008-05500 CVE-2008-5794 · GHSA-vwgx-w8wv-95f6

Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final…

LOW 28

Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02605 Published 2008-12-31 No fix listed CWE-22

TI-2008-03361 CVE-2008-3509 · GHSA-q6c8-7rvq-2f39

LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2)…

LOW 39

LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in system/admin/, which allows remote attackers to change the configuration or execute arbitrary PHP c…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03428 Published 2008-08-07 No fix listed CWE-94

TI-2007-01118 CVE-2007-1151 · GHSA-q78r-mh27-xp27

Cross-site scripting (XSS) vulnerability in LoveCMS 1.4 allows remote attackers to inject…

LOW 23

Cross-site scripting (XSS) vulnerability in LoveCMS 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter to the top-level URI, possibly related to a SQL error.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01584 Published 2007-02-27 No fix listed CWE-79

TI-2007-01117 CVE-2007-1150 · GHSA-8x9p-43q6-hxc6

Unrestricted file upload vulnerability in LoveCMS 1.4 allows remote authenticated…

LOW 19

Unrestricted file upload vulnerability in LoveCMS 1.4 allows remote authenticated administrators to upload arbitrary files to /modules/content/pictures/tmp/.

CVSS 2.0LOW 3.6 Network Low privileges Interaction — EPSS 0.01037 Published 2007-02-27 No fix listed CWE-264

TI-2007-01116 CVE-2007-1149 · GHSA-6vp8-hc62-2fjx

Multiple directory traversal vulnerabilities in LoveCMS 1.4 allow remote attackers to…

LOW 29

Multiple directory traversal vulnerabilities in LoveCMS 1.4 allow remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03704 Published 2007-02-27 No fix listed CWE-22

TI-2007-01115 CVE-2007-1148 · GHSA-m7v9-hxhv-mx4q

PHP remote file inclusion vulnerability in install/index.php in LoveCMS 1.4 allows remote…

LOW 38

PHP remote file inclusion vulnerability in install/index.php in LoveCMS 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the step parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02714 Published 2007-02-27 No fix listed CWE-94