Vulnerabilities

TI-2007-03941 CVE-2007-4073 · GHSA-qhhg-x68m-7rh6

Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which…

LOW 25

Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which allows remote attackers to send arbitrary amounts of forged e-mail.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01222 Published 2007-07-30 No fix listed

TI-2007-03940 CVE-2007-4072 · GHSA-hvcp-w92q-c45m

Webbler CMS before 3.1.6 provides the full installation path within HTML comments in…

LOW 25

Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows remote attackers to obtain sensitive information by viewing the HTML source, as demonstrated by viewing…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01218 Published 2007-07-30 No fix listed

TI-2007-03939 CVE-2007-4071 · GHSA-2vh3-v4c9-q7c6

Multiple cross-site scripting (XSS) vulnerabilities in uploader/index.php in Webbler CMS…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in uploader/index.php in Webbler CMS before 3.1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) login parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01217 Published 2007-07-30 No fix listed

Vulnerabilities

Filters

Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which…

Webbler CMS before 3.1.6 provides the full installation path within HTML comments in…

Multiple cross-site scripting (XSS) vulnerabilities in uploader/index.php in Webbler CMS…