Vulnerabilities

TI-2003-01359 CVE-2003-1459 · GHSA-7rpp-xg8m-55hx

Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote…

MEDIUM 40

Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary PHP code via the (1) template parameter in News.php or (2) installdir parameter in install.php.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.07072 Published 2007-10-23 No fix listed CWE-94

TI-2003-01358 CVE-2003-1458 · GHSA-m298-p45c-x364

SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote…

LOW 35

SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL commands via the member name.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01137 Published 2007-10-23 No fix listed CWE-89

Vulnerabilities

Filters

Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote…

SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote…