Vulnerabilities

TI-2008-04821 CVE-2008-5068 · GHSA-5qj9-gxv6-5gjr

Multiple cross-site scripting (XSS) vulnerabilities in Kmita Gallery allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Kmita Gallery allow remote attackers to inject arbitrary web script or HTML via the (1) begin parameter to index.php and the (2) searchtext parameter to search.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01462 Published 2008-11-13 No fix listed CWE-79

TI-2008-04820 CVE-2008-5067 · GHSA-7pqv-738f-pvpf

Cross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows…

LOW 23

Cross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrary web script or HTML via the q parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01449 Published 2008-11-13 No fix listed CWE-79

TI-2008-02111 CVE-2008-2199 · GHSA-cx7v-wcrv-84ff

PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php in Kmita Mail…

LOW 35

PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php in Kmita Mail 3.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the file param…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02814 Published 2008-05-14 No fix listed CWE-94

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in Kmita Gallery allow remote…

Cross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows…

PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php in Kmita Mail…