Vulnerabilities

TI-2012-05393 CVE-2012-6691 · GHSA-g56j-5qqv-7cxw

Multiple cross-site request forgery (CSRF) vulnerabilities in the admin panel in osCMax…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks v…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0062 Published 2015-05-20 No fix listed CWE-352

TI-2012-01454 CVE-2012-1665 · GHSA-c67h-89mw-v4vj

Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow…

LOW 36

Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow (1) remote attackers to execute arbitrary SQL commands via the username parameter in a process action to admin/login.php or (2) remot…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0152 Published 2015-05-20 No fix listed CWE-89

TI-2012-01453 CVE-2012-1664 · GHSA-m9mc-3jw3-q235

Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in osCMax before…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in a process action to admin/logi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02807 Published 2015-05-20 No fix listed CWE-79

Vulnerabilities

Filters

Multiple cross-site request forgery (CSRF) vulnerabilities in the admin panel in osCMax…

Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow…

Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in osCMax before…