Vulnerabilities

TI-2009-04738 CVE-2009-4982 · GHSA-hw9x-73p5-9hhw

SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when…

LOW 32

SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to the default URI.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00913 Published 2010-08-25 No fix listed CWE-89

TI-2006-06515 CVE-2006-6771 · GHSA-8263-5wg2-7cg5

Multiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 and earlier, when…

LOW 34

Multiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[PTH][func] parameter…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02272 Published 2006-12-27 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when…

Multiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 and earlier, when…