Vulnerabilities

TI-2008-02853 CVE-2008-2979 · GHSA-p3j9-q9vj-jx3p

Multiple cross-site scripting (XSS) vulnerabilities in phpi/login.php in Ourvideo CMS 9.5…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in phpi/login.php in Ourvideo CMS 9.5 allow remote attackers to inject arbitrary web script or HTML via the (1) top_page and (2) end_page parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01524 Published 2008-07-02 No fix listed CWE-79

TI-2008-02851 CVE-2008-2977 · GHSA-g864-c2g5-ph57

Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote…

LOW 37

Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote attackers to execute arbitrary PHP code via a URL in the include_connection parameter to (1) edit_top_feature.php and (2) edit_topics_fe…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02427 Published 2008-07-02 No fix listed CWE-94

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in phpi/login.php in Ourvideo CMS 9.5…

Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote…