Vulnerabilities

TI-2009-02331 CVE-2009-2443 · GHSA-cvh6-597h-ppxp

Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain…

LOW 29

Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03205 Published 2009-07-13 No fix listed CWE-264

TI-2008-03118 CVE-2008-3256 · GHSA-m6r9-xv3r-256h

SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and…

LOW 37

SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0199 Published 2008-07-22 No fix listed CWE-89

TI-2006-00761 CVE-2006-0783 · GHSA-7frg-jvhq-6qr5

Cross-site scripting (XSS) vulnerability in page.php in in Siteframe Beaumont, possibly…

LOW 24

Cross-site scripting (XSS) vulnerability in page.php in in Siteframe Beaumont, possibly 5.0.2 or 5.0.1a, allows remote attackers to inject arbitrary web script or HTML via the comment_text parameter to the user comment p…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0192 Published 2006-02-19 No fix listed

Vulnerabilities

Filters

Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain…

SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and…

Cross-site scripting (XSS) vulnerability in page.php in in Siteframe Beaumont, possibly…