Vulnerabilities

TI-2008-06640 CVE-2008-6952 · GHSA-vw6g-cp62-rm5h

SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote…

LOW 37

SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02266 Published 2009-08-12 No fix listed CWE-89

TI-2008-06639 CVE-2008-6951 · GHSA-r76h-m46c-jfwg

MauryCMS 0.53.2 and earlier does not require administrative authentication for…

LOW 36

MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/browser/default/browser.html, which allows remote attackers to upload arbitrary files via a direct reque…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01784 Published 2009-08-12 No fix listed CWE-287

TI-2008-06037 CVE-2008-6345 · GHSA-gr94-w55c-f6cf

SQL injection vulnerability in Forum.php in SolarCMS 0.53.8 and 1.0 allows remote…

LOW 35

SQL injection vulnerability in Forum.php in SolarCMS 0.53.8 and 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to indes.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-02-27 No fix listed CWE-89

Vulnerabilities

Filters

SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote…

MauryCMS 0.53.2 and earlier does not require administrative authentication for…

SQL injection vulnerability in Forum.php in SolarCMS 0.53.8 and 1.0 allows remote…