Vulnerabilities

TI-2005-04140 CVE-2005-4397 · GHSA-7427-ffj8-874j

SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute…

LOW 35

SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the Event_ID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01111 Published 2005-12-20 No fix listed

TI-2005-04139 CVE-2005-4396 · GHSA-cpfg-9xhh-m7cm

Cross-site scripting (XSS) vulnerability in admin/Default.asp in iCMS allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in admin/Default.asp in iCMS allows remote attackers to inject arbitrary web script or HTML via the LoginMSG parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00938 Published 2005-12-20 No fix listed

TI-2005-03392 CVE-2005-3574 · GHSA-4h7j-mfj8-48jj

PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include…

LOW 26

PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include arbitrary files via the page parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01493 Published 2005-11-16 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute…

Cross-site scripting (XSS) vulnerability in admin/Default.asp in iCMS allows remote…

PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include…