TI-2015-01293 CVE-2015-1425 · GHSA-hj2v-r6vv-m6mj
JAKWEB Gecko CMS has Multiple Input Validation Vulnerabilities
Priority MEDIUM 45
JAKWEB Gecko CMS has Multiple Input Validation Vulnerabilities
Vulnerabilities
4 records
TI-2015-01292 CVE-2015-1424 · GHSA-587g-qp7x-ww69
Cross-site request forgery (CSRF) vulnerability in Gecko CMS 2.2 and 2.3 allows remote…
Priority LOW 35
Cross-site request forgery (CSRF) vulnerability in Gecko CMS 2.2 and 2.3 allows remote attackers to hijack the authentication of administrators for requests that add an administrator user via a newuser request to admin/i…
TI-2015-01291 CVE-2015-1423 · GHSA-r6m2-74p6-hm2h
Multiple SQL injection vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote…
Priority LOW 32
Multiple SQL injection vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote administrators to execute arbitrary SQL commands via the (1) jak_delete_log[] or (2) ssp parameter to admin/index.php.
TI-2015-01290 CVE-2015-1422 · GHSA-9vqf-7ph9-8wvj
Multiple cross-site scripting (XSS) vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote…
Priority LOW 27
Multiple cross-site scripting (XSS) vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) horder[], (2) jak_catid, (3) jak_content, (4) jak_css, (5) jak_delete…