Vulnerabilities

TI-2026-51755 CVE-2026-73671 · GHSA-jjjg-67rc-qf87

Saurus CMS Unauthenticated Open Redirect via logout url parameter

MEDIUM 56

Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php, where the url parameter supplied via GET or POST is passed directly to the Locatio…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0031 Published 2026-08-13 No fix listed CWE-601

TI-2026-51754 CVE-2026-73670 · GHSA-mgf4-rmqm-69fq

CMS Admin SQL Injection via db_data.php table_name Parameter

MEDIUM 40

A CMS contains a SQL injection vulnerability in admin/db_data.php at line 509 that allows authenticated administrators to inject arbitrary SQL into a SHOW COLUMNS FROM statement by supplying unsanitized input through the…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.0053 Published 2026-08-13 No fix listed CWE-89

TI-2015-00815 CVE-2015-0876 · GHSA-x77r-29q3-gcgf

Multiple cross-site scripting (XSS) vulnerabilities in the print_language_selectbox…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in the print_language_selectbox function in classes/adminpage.inc.php in Saurus CMS Community Edition before 4.7 2015-02-04 allow remote attackers to inject arbitrary w…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01773 Published 2015-04-07 No fix listed CWE-79

TI-2015-01396 CVE-2015-1562 · GHSA-mqhv-7chc-4f8p

Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to admin/user_management.php, (2) data_search parameter t…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01862 Published 2015-02-09 No fix listed CWE-79

TI-2010-01913 CVE-2010-1997 · GHSA-35hw-wvqh-pff2

Cross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows…

LOW 17

Cross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to inject arbitrary web script or HTML via the pealkiri parameter.

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.03378 Published 2010-05-20 No fix listed CWE-79