Vulnerabilities

TI-2008-02104 CVE-2008-2192 · GHSA-rpp4-2q2j-fc26

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9…

MEDIUM 49

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03744 Published 2008-05-14 No fix listed CWE-94

TI-2007-04869 CVE-2007-5052 · GHSA-qqhq-3w3x-rwxq

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arbitrary web script or HTML via a request to the wiki module with (1) the title parameter or (2) a "tit…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01507 Published 2007-09-24 No fix listed CWE-79

TI-2007-03983 CVE-2007-4115 · GHSA-gjwr-v3q3-r53h

Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary web script or HTML via the wndtitle parameter to (1) lang-en.php, (2) menu-ed.php, or (3) titletext-ed.…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02383 Published 2007-07-31 No fix listed

Vulnerabilities

Filters

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9…

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow…

Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote…