Vulnerabilities

TI-2007-01200 CVE-2007-1237 · GHSA-v4q8-8m55-x9rg

sitex allows remote attackers to obtain potentially sensitive information via a ' (quote)…

LOW 26

sitex allows remote attackers to obtain potentially sensitive information via a ' (quote) value for certain parameters, as demonstrated by parameters used in forum and search, which forces a SQL error.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01385 Published 2007-03-03 No fix listed CWE-200

TI-2007-01198 CVE-2007-1235 · GHSA-xr6g-24mv-c6p6

Unrestricted file upload vulnerability in sitex allows remote attackers to upload…

LOW 36

Unrestricted file upload vulnerability in sitex allows remote attackers to upload arbitrary PHP code via an avatar filename with a double extension such as .php.jpg, which fails verification and is saved as a .php file.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01545 Published 2007-03-03 No fix listed CWE-20

TI-2007-01197 CVE-2007-1234 · GHSA-x424-5qcq-9892

Multiple cross-site scripting (XSS) vulnerabilities in sitex allow remote attackers to…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in sitex allow remote attackers to inject arbitrary web script or HTML via (1) the sxYear parameter to calendar.php, (2) the search parameter to search.php, (3) the lin…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01303 Published 2007-03-03 No fix listed CWE-79

Vulnerabilities

Filters

sitex allows remote attackers to obtain potentially sensitive information via a ' (quote)…

Unrestricted file upload vulnerability in sitex allows remote attackers to upload…

Multiple cross-site scripting (XSS) vulnerabilities in sitex allow remote attackers to…