Vulnerabilities

TI-2008-05710 CVE-2008-6014 · GHSA-qq4v-5p35-65c6

SQL injection vulnerability in scripts/links.php in Rianxosencabos CMS 0.9 allows remote…

LOW 35

SQL injection vulnerability in scripts/links.php in Rianxosencabos CMS 0.9 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2009-01-30 No fix listed CWE-89

TI-2008-04069 CVE-2008-4245 · GHSA-gw6p-34jh-g7qg

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator…

LOW 33

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to (1) change a user's privileges, (2) delete a user account, or perform unspecified ot…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01931 Published 2008-09-25 No fix listed CWE-264

TI-2008-04068 CVE-2008-4244 · GHSA-g5gg-m44h-f465

Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain…

LOW 38

Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain administrative access by setting the usuario and pass cookies to 1.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02858 Published 2008-09-25 No fix listed CWE-287

Vulnerabilities

Filters

SQL injection vulnerability in scripts/links.php in Rianxosencabos CMS 0.9 allows remote…

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator…

Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain…