Vulnerabilities

TI-2007-06187 CVE-2007-6490 · GHSA-2x6c-m4cg-2qcg

Cross-site request forgery (CSRF) vulnerability in Falcon Series One CMS 1.4.3 allows…

LOW 22

Cross-site request forgery (CSRF) vulnerability in Falcon Series One CMS 1.4.3 allows remote attackers to change a password via a certain changepass action to index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00881 Published 2007-12-20 No fix listed CWE-352

TI-2007-06186 CVE-2007-6489 · GHSA-h7m2-4499-r4w3

Multiple cross-site scripting (XSS) vulnerabilities in Falcon Series One CMS 1.4.3 allow…

MEDIUM 43

Multiple cross-site scripting (XSS) vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) gb_mail, (2) gb_name, and (3) gb_text parameters in a guestbook…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06837 Published 2007-12-20 No fix listed

TI-2007-06185 CVE-2007-6488 · GHSA-96pv-3xm8-gpcc

Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow…

LOW 35

Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in (1) the dir[classes] parameter to sitemap.xml.php or (2) the error param…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02665 Published 2007-12-20 No fix listed CWE-20

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in Falcon Series One CMS 1.4.3 allows…

Multiple cross-site scripting (XSS) vulnerabilities in Falcon Series One CMS 1.4.3 allow…

Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow…