Vulnerabilities

TI-2007-05809 CVE-2007-6087 · GHSA-v6jj-68q8-6xhq

Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows…

LOW 32

Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote attackers to change the admin password via certain parameters to the changepass module.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00987 Published 2007-11-22 No fix listed CWE-352

TI-2007-05808 CVE-2007-6086 · GHSA-pc3g-mmhq-h9c9

Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers…

MEDIUM 45

Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the module parameter.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02943 Published 2007-11-22 No fix listed CWE-22

TI-2007-05807 CVE-2007-6085 · GHSA-w765-p6jv-84pr

Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the (1) vedipm or (2) live_chat module.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01517 Published 2007-11-22 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows…

Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers…

Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow…