Vulnerabilities

TI-2011-02387 CVE-2011-2727 · GHSA-6h32-4p7v-9572

The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3)…

LOW 23

The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers to obtain sensitive information via a dire…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01533 Published 2014-12-30 No fix listed CWE-200

TI-2012-04486 CVE-2012-5312 · GHSA-w3h7-76vf-jfc7

SQL injection vulnerability in Tribiq CMS allows remote attackers to execute arbitrary…

LOW 35

SQL injection vulnerability in Tribiq CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01106 Published 2012-10-08 No fix listed CWE-89

TI-2009-02127 CVE-2009-2220 · GHSA-x5gw-v7fx-h638

Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals…

LOW 27

Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and possibly execute arbitrary files via directory…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.0197 Published 2009-06-26 No fix listed CWE-22

TI-2008-06492 CVE-2008-6804 · GHSA-wwhw-v77g-vr64

Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain…

LOW 38

Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG cookies.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02561 Published 2009-05-11 No fix listed CWE-287

TI-2008-05657 CVE-2008-5961 · GHSA-jvrv-r5qc-7fw8

Cross-site scripting (XSS) vulnerability in index.php in Tribiq CMS Community 5.0.10B and…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parameter in a document action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00845 Published 2009-01-23 No fix listed CWE-79

TI-2008-05656 CVE-2008-5960 · GHSA-ffc6-gmhq-45g3

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E…

LOW 35

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01001 Published 2009-01-23 No fix listed CWE-89

TI-2008-04651 CVE-2008-4894 · GHSA-crqw-384v-38qx

Directory traversal vulnerability in…

LOW 27

Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to inc…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.01996 Published 2008-11-04 No fix listed CWE-22

TI-2008-04650 CVE-2008-4893 · GHSA-7h2q-hj3f-p932

Cross-site scripting (XSS) vulnerability in…

LOW 16

Cross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled, allows remote attackers to inject arbitrary web script o…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01497 Published 2008-11-04 No fix listed CWE-79

Vulnerabilities

Filters