Vulnerabilities

TI-2006-04921 CVE-2006-5105 · GHSA-ww65-mqw5-5w26

Multiple PHP remote file inclusion vulnerabilities in SyntaxCMS 1.1.1 through 1.3 allow…

LOW 36

Multiple PHP remote file inclusion vulnerabilities in SyntaxCMS 1.1.1 through 1.3 allow remote attackers to execute arbitrary PHP code via a URL in (1) the init_path parameter to admin/testing/tests/0030_init_syntax.php,…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01492 Published 2006-10-02 No fix listed

TI-2006-04871 CVE-2006-5055 · GHSA-5xgm-63rp-xwqv

PHP remote file inclusion vulnerability in admin/testing/tests/0004_init_urls.php in…

LOW 39

PHP remote file inclusion vulnerability in admin/testing/tests/0004_init_urls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the init_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03536 Published 2006-09-28 No fix listed CWE-94

TI-2005-04239 CVE-2005-4496 · GHSA-4694-6229-fx5x

Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows…

LOW 24

Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search_query parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01748 Published 2005-12-22 No fix listed

Vulnerabilities

Filters

Multiple PHP remote file inclusion vulnerabilities in SyntaxCMS 1.1.1 through 1.3 allow…

PHP remote file inclusion vulnerability in admin/testing/tests/0004_init_urls.php in…

Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows…