Vulnerabilities

TI-2008-04654 CVE-2008-4897 · GHSA-xj8v-j2vm-3w83

SQL injection vulnerability in fichiers/add_url.php in Logz podcast CMS 1.3.1, when…

LOW 32

SQL injection vulnerability in fichiers/add_url.php in Logz podcast CMS 1.3.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the art parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01117 Published 2008-11-04 No fix listed CWE-89

TI-2008-04653 CVE-2008-4896 · GHSA-45jj-q8mv-p3p6

Cross-site scripting (XSS) vulnerability in fichiers/add_url.php in Logz CMS 1.3.1 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in fichiers/add_url.php in Logz CMS 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the art parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01446 Published 2008-11-04 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in fichiers/add_url.php in Logz podcast CMS 1.3.1, when…

Cross-site scripting (XSS) vulnerability in fichiers/add_url.php in Logz CMS 1.3.1 allows…