Vulnerabilities

TI-2009-03007 CVE-2009-3162 · GHSA-39jq-h4cx-9j2q

Cross-site scripting (XSS) vulnerability in Multi Website 1.5 allows remote attackers to…

LOW 23

Cross-site scripting (XSS) vulnerability in Multi Website 1.5 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to the default URI.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01269 Published 2009-09-10 No fix listed CWE-79

TI-2009-02995 CVE-2009-3150 · GHSA-3564-89gh-mmc9

SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands via the Browse parameter in a vote action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2009-09-10 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in Multi Website 1.5 allows remote attackers to…

SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to…