Vulnerabilities

TI-2010-04782 CVE-2010-5059 · GHSA-h5c2-cpxw-3vf4

SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to…

LOW 37

SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via the album parameter in a photos action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02044 Published 2011-11-23 No fix listed CWE-89

TI-2010-02066 CVE-2010-2154 · GHSA-xxf2-85hh-x424

Cross-site scripting (XSS) vulnerability in the Search Site in CMScout 2.09, and possibly…

LOW 26

Cross-site scripting (XSS) vulnerability in the Search Site in CMScout 2.09, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02995 Published 2010-06-03 No fix listed CWE-79

TI-2008-06415 CVE-2008-6726 · GHSA-ww73-22h6-4w8c

Multiple directory traversal vulnerabilities in CMScout 2.06, when register_globals is…

LOW 31

Multiple directory traversal vulnerabilities in CMScout 2.06, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.02125 Published 2009-04-17 No fix listed CWE-22

TI-2008-06414 CVE-2008-6725 · GHSA-3mcc-24f2-h4fr

Multiple SQL injection vulnerabilities in CMScout 2.06 allow remote authenticated users…

LOW 29

Multiple SQL injection vulnerabilities in CMScout 2.06 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1) index.php in a mythings page (mythings.php) and (2) the users page in…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00952 Published 2009-04-17 No fix listed CWE-89

TI-2008-03276 CVE-2008-3415 · GHSA-x863-92xc-p6xw

Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not…

LOW 38

Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bit paramete…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02936 Published 2008-07-31 No fix listed CWE-22

TI-2007-03696 CVE-2007-3812 · GHSA-9vf5-8r62-q8wp

SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote…

LOW 35

SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f parameter in a forums action to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01177 Published 2007-07-17 No fix listed

TI-2006-02132 CVE-2006-2188 · GHSA-f347-6cmr-fxrc

Multiple cross-site scripting (XSS) vulnerabilities in CMScout 1.10 and earlier allow…