Vulnerabilities

TI-2014-07578 CVE-2014-9344 · GHSA-8mx3-h42x-23p5

Cross-site request forgery (CSRF) vulnerability in Snowfox CMS before 1.0.10 allows…

LOW 35

Cross-site request forgery (CSRF) vulnerability in Snowfox CMS before 1.0.10 allows remote attackers to hijack the authentication of administrators for requests that add a new admin account via a submit action in the adm…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02341 Published 2014-12-08 No fix listed CWE-352

TI-2014-07577 CVE-2014-9343 · GHSA-h2xg-jhx5-5836

Open redirect vulnerability in modules/system/controller/selectlanguage.class.php in…

LOW 30

Open redirect vulnerability in modules/system/controller/selectlanguage.class.php in Snowfox CMS 1.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the rd param…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.0219 Published 2014-12-08 No fix listed

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in Snowfox CMS before 1.0.10 allows…

Open redirect vulnerability in modules/system/controller/selectlanguage.class.php in…