Vulnerabilities

TI-2010-02575 CVE-2010-2685 · GHSA-w98j-hpp8-cqf9

siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict…

LOW 37

siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict access, which allows remote attackers to bypass intended restrictions and add administrative users via a direct request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02396 Published 2010-07-09 No fix listed CWE-264

TI-2010-02574 CVE-2010-2684 · GHSA-vmc5-rw2x-673r

SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows…

LOW 35

SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01189 Published 2010-07-09 No fix listed CWE-89

TI-2010-02573 CVE-2010-2683 · GHSA-g5h9-qm69-h5cp

SQL injection vulnerability in result.php in Customer Paradigm PageDirector CMS allows…

LOW 35

SQL injection vulnerability in result.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the sub_catid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2010-07-09 No fix listed CWE-89

Vulnerabilities

Filters

siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict…

SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows…

SQL injection vulnerability in result.php in Customer Paradigm PageDirector CMS allows…