Vulnerabilities

TI-2008-00215 CVE-2008-0233 · GHSA-2hw7-5qc9-q2cg

Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote…

LOW 37

Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02212 Published 2008-01-11 No fix listed CWE-264

TI-2008-00214 CVE-2008-0232 · GHSA-377g-g6h5-4cxj

Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to index.php, or the (2) f or t parameters to forums/index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-01-11 No fix listed CWE-89

Vulnerabilities

Filters

Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote…

Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to…