Vulnerabilities

TI-2007-05792 CVE-2007-6058 · GHSA-c3j6-m7f6-92cp

Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow…

LOW 35

Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) codes action in the profile-codes module, (2) video…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01229 Published 2007-11-20 No fix listed CWE-89

TI-2007-05493 CVE-2007-5720 · GHSA-2jhx-jvpp-rf85

Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows…

LOW 34

Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors involving creation of a profile.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01962 Published 2007-10-30 No fix listed CWE-94

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow…

Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows…