Vulnerabilities

TI-2010-01035 CVE-2010-1076 · GHSA-4q4g-j9v4-87h8

Cross-site scripting (XSS) vulnerability in index.php in Entry Level CMS (EL CMS) allows…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to inject arbitrary web script or HTML via the subj parameter, which is not properly handled in a forced SQL error…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00855 Published 2010-03-23 No fix listed CWE-79

TI-2010-01034 CVE-2010-1075 · GHSA-hpfg-cr2g-jp42

SQL injection vulnerability in index.php in Entry Level CMS (EL CMS) allows remote…

LOW 35

SQL injection vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to execute arbitrary SQL commands via the subj parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01139 Published 2010-03-23 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in index.php in Entry Level CMS (EL CMS) allows…

SQL injection vulnerability in index.php in Entry Level CMS (EL CMS) allows remote…