Vulnerabilities

TI-2009-02973 CVE-2009-3118 · GHSA-xf2c-ccw7-485g

SQL injection vulnerability in mod/poll/comment.php in the vote module in Danneo CMS…

LOW 35

SQL injection vulnerability in mod/poll/comment.php in the vote module in Danneo CMS 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the comtext parameter, in conjunction with crafted comn…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01163 Published 2009-09-09 No fix listed CWE-89

TI-2008-01450 CVE-2008-1513 · GHSA-2wj4-9c89-gmgp

SQL injection vulnerability in index.php in Danneo CMS 0.5.1 and earlier, when the…

LOW 32

SQL injection vulnerability in index.php in Danneo CMS 0.5.1 and earlier, when the Referers statistics option is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0085 Published 2008-03-25 No fix listed CWE-89

Vulnerabilities

Filters

SQL injection vulnerability in mod/poll/comment.php in the vote module in Danneo CMS…

SQL injection vulnerability in index.php in Danneo CMS 0.5.1 and earlier, when the…