Vulnerabilities

TI-2011-03534 CVE-2011-3994 · GHSA-w3rg-mp26-54rp

Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the…

LOW 31

Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugi…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00586 Published 2011-11-03 No fix listed CWE-352

TI-2011-03533 CVE-2011-3993 · GHSA-rrj5-x37f-2q48

SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2…

LOW 27

SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, uses weak permissions, which a…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01117 Published 2011-11-03 No fix listed CWE-264

TI-2008-06138 CVE-2008-6448 · GHSA-cvxr-5856-5xwh

Cross-site scripting (XSS) vulnerability in install.cgi in SKYARC System MTCMS WYSIWYG…

LOW 22

Cross-site scripting (XSS) vulnerability in install.cgi in SKYARC System MTCMS WYSIWYG Editor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2009-03-09 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the…

SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2…

Cross-site scripting (XSS) vulnerability in install.cgi in SKYARC System MTCMS WYSIWYG…