Vulnerabilities

TI-2009-02266 CVE-2009-2376 · GHSA-5pv5-ffpr-6ccq

Cross-site scripting (XSS) vulnerability in the Html::textarea function in…

LOW 22

Cross-site scripting (XSS) vulnerability in the Html::textarea function in application/libraries/Html.php in TangoCMS 2.x before 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the value paramete…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01119 Published 2009-07-08 No fix listed CWE-79

TI-2009-00820 CVE-2009-0862 · GHSA-966f-qj79-3q6f

Cross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in…

LOW 22

Cross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x (aka Eagle) before 2.2.4 allows remote attackers to inject…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2009-03-10 No fix listed CWE-79

TI-2008-05744 CVE-2008-6048 · GHSA-6f6v-xr97-pjpx

Multiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow…

LOW 27

Multiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow remote attackers to hijack the authentication of administrators.

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00479 Published 2009-02-04 No fix listed CWE-352

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in the Html::textarea function in…

Cross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in…

Multiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow…