Vulnerabilities

TI-2012-04134 CVE-2012-4892 · GHSA-w3vc-v49w-cp33

Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2012-03.08 and earlier…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title_en, (2) summary_en, or (3) body_en parameter in a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2012-09-10 No fix listed CWE-79

TI-2012-04132 CVE-2012-4890 · GHSA-fxh3-7cv7-7j5j

Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2011 08.09.2 and…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a (1) comment to the news, (2) title to the news, or (3) the f…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01379 Published 2012-09-10 No fix listed CWE-79

TI-2012-04122 CVE-2012-4878 · GHSA-6r6r-4q6c-c9vg

Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2…

LOW 34

Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08761 Published 2012-09-06 No fix listed CWE-22

TI-2012-04121 CVE-2012-4877 · GHSA-r464-5gc2-5fcc

Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011…

LOW 32

Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01183 Published 2012-09-06 No fix listed CWE-352

TI-2009-00549 CVE-2009-0572 · GHSA-223m-fhfm-47hr

PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka…

LOW 32

PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04, when register_globals is enabled and magic_quotes_gpc disabled, allows remote attackers to execute…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.06337 Published 2009-02-13 No fix listed CWE-94

TI-2008-05467 CVE-2008-5761 · GHSA-x327-rhq4-2q5c

Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3)…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter to the default URI; (2) the foto param…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01735 Published 2008-12-30 No fix listed CWE-79

TI-2008-05465 CVE-2008-5759 · GHSA-v39h-2p92-4xpx

Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows…