Vulnerabilities

TI-2014-03989 CVE-2014-4851 · GHSA-9vx6-wq2c-qc53

Open redirect vulnerability in msg.php in FoeCMS allows remote attackers to redirect…

LOW 28

Open redirect vulnerability in msg.php in FoeCMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the r parameter.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01149 Published 2014-07-10 No fix listed

TI-2014-03988 CVE-2014-4850 · GHSA-rq2q-6mpw-576g

SQL injection vulnerability in index.php in FoeCMS allows remote attackers to execute…

LOW 35

SQL injection vulnerability in index.php in FoeCMS allows remote attackers to execute arbitrary SQL commands via the i parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01287 Published 2014-07-10 No fix listed CWE-89

TI-2014-03987 CVE-2014-4849 · GHSA-256v-c957-m9f7

Multiple cross-site scripting (XSS) vulnerabilities in msg.php in FoeCMS allow remote…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in msg.php in FoeCMS allow remote attackers to inject arbitrary web script or HTML via the (1) e or (2) r parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00991 Published 2014-07-10 No fix listed CWE-79

Vulnerabilities

Filters

Open redirect vulnerability in msg.php in FoeCMS allows remote attackers to redirect…

SQL injection vulnerability in index.php in FoeCMS allows remote attackers to execute…

Multiple cross-site scripting (XSS) vulnerabilities in msg.php in FoeCMS allow remote…