Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Sinecms Clear all filters
TI-2008-06851 CVE-2008-7163 · GHSA-fq8j-6x8v-75hr

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and…

Priority LOW 37

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the sine[config][ind…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04082 Published 2009-09-04 No fix listed CWE-22
TI-2007-06074 CVE-2007-6367 · GHSA-3vg2-5h9w-8928

Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and…

Priority LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username (user) or (2) comment (commento) field,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04255 Published 2007-12-15 No fix listed CWE-79
TI-2007-06073 CVE-2007-6366 · GHSA-p7hv-pp4c-qp77

Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote…

Priority LOW 37

Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to mods/Calendar/index.php, accessed through a Calendar info action to…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02356 Published 2007-12-15 No fix listed CWE-89