Vulnerabilities

TI-2015-01858 CVE-2015-2071 · GHSA-m43g-2rqm-rjc3

Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage…

LOW 28

Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote authenticated users to read arbitrary files via a ..

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.06611 Published 2015-02-24 No fix listed CWE-22

TI-2015-01857 CVE-2015-2070 · GHSA-mxxc-6v6v-q22g

SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows…

LOW 37

SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitrary SQL commands via the catId parameter to cm/blogrss/feed.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02397 Published 2015-02-24 No fix listed CWE-89

Vulnerabilities

Filters

Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage…

SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows…