Vulnerabilities

TI-2015-00815 CVE-2015-0876 · GHSA-x77r-29q3-gcgf

Multiple cross-site scripting (XSS) vulnerabilities in the print_language_selectbox…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in the print_language_selectbox function in classes/adminpage.inc.php in Saurus CMS Community Edition before 4.7 2015-02-04 allow remote attackers to inject arbitrary w…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01773 Published 2015-04-07 No fix listed CWE-79

TI-2015-01396 CVE-2015-1562 · GHSA-mqhv-7chc-4f8p

Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to admin/user_management.php, (2) data_search parameter t…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01862 Published 2015-02-09 No fix listed CWE-79

TI-2010-01913 CVE-2010-1997 · GHSA-35hw-wvqh-pff2

Cross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows…

LOW 17

Cross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to inject arbitrary web script or HTML via the pealkiri parameter.

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.03378 Published 2010-05-20 No fix listed CWE-79

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in the print_language_selectbox…

Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote…

Cross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows…