Vulnerabilities

TI-2006-04807 CVE-2006-4989 · GHSA-c88g-cp9r-j36m

Patrick Michaelis Wili-CMS allows remote attackers to obtain sensitive information via a…

LOW 28

Patrick Michaelis Wili-CMS allows remote attackers to obtain sensitive information via a direct request for (1) thumbnail.php, (2) functions/admin/all.php, (3) functions/admin/init_session.php, (4) functions/all.php, and…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02871 Published 2006-09-26 No fix listed

TI-2006-04806 CVE-2006-4988 · GHSA-hcqv-qm5p-6p69

Multiple cross-site scripting (XSS) vulnerabilities in Patrick Michaelis Wili-CMS allow…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to inject arbitrary web script or HTML via (1) the query string to relocate.php, (2) the globals[pageid] parameter…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01711 Published 2006-09-26 No fix listed

TI-2006-04805 CVE-2006-4987 · GHSA-5h33-mmwx-7368

Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow…

LOW 38

Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to execute arbitrary PHP code via a URL in the globals[content_dir] parameter in (1) example-view/templates/article.…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0261 Published 2006-09-26 No fix listed

Vulnerabilities

Filters

Patrick Michaelis Wili-CMS allows remote attackers to obtain sensitive information via a…

Multiple cross-site scripting (XSS) vulnerabilities in Patrick Michaelis Wili-CMS allow…

Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow…