Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Brilaps Component: Mostlyce Clear all filters
TI-2008-06901 CVE-2008-7213 · GHSA-42xp-gpw5-93cm

Cross-site scripting (XSS) vulnerability in…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to injec…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02152 Published 2009-09-11 No fix listed CWE-79
TI-2008-06900 CVE-2008-7212 · GHSA-3mg9-wjxc-5593

MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to…

Priority LOW 26

MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via certain requests to mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01655 Published 2009-09-11 No fix listed CWE-264