Priority LOW 25
Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magic_quotes_gpc is disabled, allow remote attackers to read arbitrary files via a ..
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02358 · Published 2008-02-15 · No fix listed CWE-22
Priority LOW 22
Multiple cross-site scripting (XSS) vulnerabilities in artmedic webdesign weblog allow remote attackers to inject arbitrary web script or HTML via the (1) date parameter to artmedic_print.php and the (2) jahrneu paramete…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01107 · Published 2008-02-13 · No fix listed CWE-79
Priority LOW 34
Incomplete blacklist vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftps, (3) ssh2.sftp, or (4) ssh2.scp URL, in th…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01877 · Published 2007-10-19 · No fix listed CWE-94
Priority LOW 37
Directory traversal vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to include and execute arbitrary local files via a ..
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02334 · Published 2007-10-17 · No fix listed CWE-22
Priority LOW 38
PHP remote file inclusion vulnerability in index.php in Artmedic Links 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, which is processed by the readfile function.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02576 · Published 2006-09-21 · No fix listed
Priority LOW 25
artmedic newsletter 4.1.2 and possibly other versions, when register_globals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the email parameter to newsletter_log.php.
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.01092 · Published 2006-05-26 · No fix listed
Priority LOW 28
artmedic newsletter 4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the logfile parameter in a direct request to log…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.02637 · Published 2006-05-26 · No fix listed
Priority LOW 32
PHP remote file inclusion vulnerability in event/index.php in Artmedic Event allows remote attackers to execute arbitrary code via a URL in the page parameter.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0607 · Published 2006-05-01 · No fix listed
Priority LOW 35
PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 (artmedic_links5) allows remote attackers to execute arbitrary PHP code by modifying the id parameter to reference a URL on a remote web server…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01284 · Published 2004-06-30 · No fix listed