Vulnerabilities

TI-2008-02859 CVE-2008-2985 · GHSA-q5vg-rh33-mggr

Directory traversal vulnerability in load_language.php in CMReams CMS 1.3.1.1 Beta 2…

LOW 34

Directory traversal vulnerability in load_language.php in CMReams CMS 1.3.1.1 Beta 2, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequenc…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01846 Published 2008-07-02 No fix listed CWE-22

TI-2008-02858 CVE-2008-2984 · GHSA-v9m2-f663-9952

Cross-site scripting (XSS) vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1…

LOW 23

Cross-site scripting (XSS) vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1 Beta 2 allows remote attackers to inject arbitrary web script or HTML via the lang[be_red_text] parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01445 Published 2008-07-02 No fix listed CWE-79

Vulnerabilities

Filters

Directory traversal vulnerability in load_language.php in CMReams CMS 1.3.1.1 Beta 2…

Cross-site scripting (XSS) vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1…