Vulnerabilities

TI-2010-01786 CVE-2010-1867 · GHSA-9qpg-8qf4-xcm3

SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber…

LOW 37

SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02046 Published 2010-05-07 No fix listed CWE-89

TI-2009-02090 CVE-2009-2183 · GHSA-54qq-6vrx-c2j9

Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows…

MEDIUM 41

Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05692 Published 2009-06-23 No fix listed CWE-22

TI-2009-02089 CVE-2009-2182 · GHSA-473m-7p62-7x2j

Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote…

LOW 34

Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) ad_popup.php, (2) camp_html.php, (3)…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01723 Published 2009-06-23 No fix listed CWE-94

TI-2009-02088 CVE-2009-2181 · GHSA-qc63-fx82-fmqf

Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in…

LOW 25

Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02391 Published 2009-06-23 No fix listed CWE-79

TI-2006-05695 CVE-2006-5912 · GHSA-7gc4-48fv-5r3r

Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack…

MEDIUM 46

Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a "Security fix for you-know-what," possibly related to encrypted passwords.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01676 Published 2006-11-15 No fix listed

TI-2006-05694 CVE-2006-5911 · GHSA-p4gw-r79r-437p

Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2…

MEDIUM 43

Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) A…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07454 Published 2006-11-15 No fix listed

TI-2006-05693 CVE-2006-5910 · GHSA-2cgh-v7qq-5hw9

Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110…

LOW 38

Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) bugreporter/thankyou.php and (…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02632 Published 2006-11-15 No fix listed

TI-2005-04391 CVE-2005-4661 · GHSA-22m9-jhmf-fc7x

The notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a…

LOW 26

The notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a certain unencrypted MySQL password, which allows remote attackers to sniff the password.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01425 Published 2006-01-16 No fix listed

Vulnerabilities

Filters