Vulnerabilities

TI-2009-04549 CVE-2009-4793 · GHSA-2x7c-q7mp-cf9c

Unrestricted file upload vulnerability in adminpanel/scripts/addphotos.php in BandSite…

LOW 30

Unrestricted file upload vulnerability in adminpanel/scripts/addphotos.php in BandSite CMS 1.1.4 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executable extension v…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01542 Published 2010-04-22 No fix listed CWE-94

TI-2009-04548 CVE-2009-4792 · GHSA-m74v-gr76-57rr

SQL injection vulnerability in includes/content/member_content.php in BandSite CMS 1.1.4…

LOW 35

SQL injection vulnerability in includes/content/member_content.php in BandSite CMS 1.1.4 allows remote attackers to execute arbitrary SQL commands via the memid parameter to members.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00993 Published 2010-04-22 No fix listed CWE-89

Vulnerabilities

Filters

Unrestricted file upload vulnerability in adminpanel/scripts/addphotos.php in BandSite…

SQL injection vulnerability in includes/content/member_content.php in BandSite CMS 1.1.4…