Vulnerabilities

TI-2009-01329 CVE-2009-1405 · GHSA-r9x8-3g9m-5hjm

Directory traversal vulnerability in index.php in PastelCMS 0.8.0, when magic_quotes_gpc…

LOW 34

Directory traversal vulnerability in index.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01896 Published 2009-04-24 No fix listed CWE-22

TI-2009-01328 CVE-2009-1404 · GHSA-2gxq-fc5q-r9gc

SQL injection vulnerability in admin.php in PastelCMS 0.8.0, when magic_quotes_gpc is…

LOW 32

SQL injection vulnerability in admin.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user (Username) parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00933 Published 2009-04-24 No fix listed CWE-89

Vulnerabilities

Filters

Directory traversal vulnerability in index.php in PastelCMS 0.8.0, when magic_quotes_gpc…

SQL injection vulnerability in admin.php in PastelCMS 0.8.0, when magic_quotes_gpc is…