Vulnerabilities

TI-2008-04276 CVE-2008-4484 · GHSA-rrjm-whcf-6m77

main.php in Crux Gallery 1.32 and earlier allows remote attackers to gain administrative…

LOW 35

main.php in Crux Gallery 1.32 and earlier allows remote attackers to gain administrative access by setting the name parameter to "users," as demonstrated via index.php.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02575 Published 2008-10-08 No fix listed CWE-264

TI-2008-04275 CVE-2008-4483 · GHSA-379x-7473-fgrc

Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when…

LOW 34

Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01857 Published 2008-10-08 No fix listed CWE-22

TI-2008-00668 CVE-2008-0700 · GHSA-j748-xg4f-5gvp

Cross-site scripting (XSS) vulnerability in search.php in Crux Software CruxCMS 3.0…

LOW 22

Cross-site scripting (XSS) vulnerability in search.php in Crux Software CruxCMS 3.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01196 Published 2008-02-12 No fix listed CWE-79

Vulnerabilities

Filters

main.php in Crux Gallery 1.32 and earlier allows remote attackers to gain administrative…

Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when…

Cross-site scripting (XSS) vulnerability in search.php in Crux Software CruxCMS 3.0…