Vulnerabilities

TI-2008-06867 CVE-2008-7179 · GHSA-qx6m-x75q-h5q2

OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator…

LOW 37

OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN_Hora, ADMIN_Logado, and ADMIN_Nome cookies to certain values, as reachable in Admin/index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02287 Published 2009-09-08 No fix listed CWE-287

TI-2008-04953 CVE-2008-5202 · GHSA-9mm4-2fvq-f33v

Cross-site scripting (XSS) vulnerability in index.php in OTManager CMS 24a allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in OTManager CMS 24a allows remote attackers to inject arbitrary web script or HTML via the conteudo parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01445 Published 2008-11-21 No fix listed CWE-79

TI-2008-04952 CVE-2008-5201 · GHSA-368x-g6j7-2g8q

Directory traversal vulnerability in index.php in OTManager CMS 24a allows remote…

LOW 38

Directory traversal vulnerability in index.php in OTManager CMS 24a allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02462 Published 2008-11-21 No fix listed CWE-22

Vulnerabilities

Filters

OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator…

Cross-site scripting (XSS) vulnerability in index.php in OTManager CMS 24a allows remote…

Directory traversal vulnerability in index.php in OTManager CMS 24a allows remote…