Vulnerabilities

TI-2008-04281 CVE-2008-4489 · GHSA-jxjh-p9ch-7f9j

Directory traversal vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote…

MEDIUM 48

Directory traversal vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the theme_chosen parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02443 Published 2008-10-08 No fix listed CWE-22

TI-2008-04280 CVE-2008-4488 · GHSA-hc52-g35v-9qm7

Cross-site scripting (XSS) vulnerability in ap-pages.php in Atarone CMS 1.2.0 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in ap-pages.php in Atarone CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) id parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2008-10-08 No fix listed CWE-79

TI-2008-04279 CVE-2008-4487 · GHSA-gv9m-gprw-fcwr

SQL injection vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers…

LOW 32

SQL injection vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) site_name, (2) email, (3) theme_chosen, (4) hp, (5) c_meta, (6) id, and (7) c_js param…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00988 Published 2008-10-08 No fix listed CWE-89

Vulnerabilities

Filters

Directory traversal vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote…

Cross-site scripting (XSS) vulnerability in ap-pages.php in Atarone CMS 1.2.0 allows…

SQL injection vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers…