Vulnerabilities

TI-2009-03265 CVE-2009-3426 · GHSA-pgvx-9xhm-x4w5

PHP remote file inclusion vulnerability in includes/file_manager/special.php in MaxCMS…

LOW 34

PHP remote file inclusion vulnerability in includes/file_manager/special.php in MaxCMS 3.11.20b allows remote attackers to execute arbitrary PHP code via a URL in the fm_includes_special parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01913 Published 2009-09-25 No fix listed CWE-94

TI-2009-03264 CVE-2009-3425 · GHSA-cqgg-3gcf-cxj8

Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS…

LOW 28

Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS 3.11.20b allows remote attackers to read arbitrary files via directory traversal sequences in the thCMS_root parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02922 Published 2009-09-25 No fix listed CWE-22

TI-2009-03263 CVE-2009-3424 · GHSA-94gc-q6xg-j8wh

Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when…

LOW 34

Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) is_projectPath parameter to includes/Inst…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0189 Published 2009-09-25 No fix listed CWE-94

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in includes/file_manager/special.php in MaxCMS…

Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS…

Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when…