Vulnerabilities

TI-2010-01931 CVE-2010-2015 · GHSA-92fj-4j8c-c7m3

Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute…

LOW 32

Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in a view_inbox action to cp/cp_messages.php or (2) the id parameter to cp/edit_ema…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00903 Published 2010-05-24 No fix listed CWE-89

TI-2010-01930 CVE-2010-2014 · GHSA-fh55-j7vw-9cfq

Cross-site scripting (XSS) vulnerability in cp/list_content.php in LiSK CMS 4.4 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in cp/list_content.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the cl or possibly id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00871 Published 2010-05-24 No fix listed CWE-79

TI-2010-01929 CVE-2010-2013 · GHSA-39hg-v7pc-xq8h

Cross-site scripting (XSS) vulnerability in cp/edit_email.php in LiSK CMS 4.4 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in cp/edit_email.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01062 Published 2010-05-24 No fix listed CWE-79

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute…

Cross-site scripting (XSS) vulnerability in cp/list_content.php in LiSK CMS 4.4 allows…

Cross-site scripting (XSS) vulnerability in cp/edit_email.php in LiSK CMS 4.4 allows…