Vulnerabilities

TI-2006-04609 CVE-2006-4772 · GHSA-7jwc-9pmp-wf2g

HotPlug CMS stores sensitive information under the web root with insufficient access…

LOW 25

HotPlug CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password and database credentials via a direct request for includes/class/conf…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01184 Published 2006-09-14 No fix listed

TI-2006-03090 CVE-2006-3190 · GHSA-v3pv-gmwr-pqwr

SQL injection vulnerability in administration/includes/login/auth.php in HotPlug CMS 1.0…

LOW 36

SQL injection vulnerability in administration/includes/login/auth.php in HotPlug CMS 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameter…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0135 Published 2006-06-23 No fix listed

TI-2006-03089 CVE-2006-3189 · GHSA-g8f5-v393-mr58

Cross-site scripting (XSS) vulnerability in administration/tblcontent/login1.php in…

LOW 29

Cross-site scripting (XSS) vulnerability in administration/tblcontent/login1.php in HotPlug CMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01708 Published 2006-06-23 No fix listed

Vulnerabilities

Filters

HotPlug CMS stores sensitive information under the web root with insufficient access…

SQL injection vulnerability in administration/includes/login/auth.php in HotPlug CMS 1.0…

Cross-site scripting (XSS) vulnerability in administration/tblcontent/login1.php in…