Vulnerabilities

TI-2009-03597 CVE-2009-3787 · GHSA-28gc-vvw4-44jg

files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal…

LOW 32

files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files via the file parameter with "logs/" in between two .

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06577 Published 2009-10-26 No fix listed CWE-22

TI-2008-06489 CVE-2008-6801 · GHSA-8gw2-9cr9-mmj8

Cross-site request forgery (CSRF) vulnerability in Vivvo CMS before 4.0.4 allows remote…

LOW 20

Cross-site request forgery (CSRF) vulnerability in Vivvo CMS before 4.0.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00351 Published 2009-05-07 No fix listed CWE-352

TI-2009-00446 CVE-2009-0466 · GHSA-f2hj-36h7-jjrw

Cross-site scripting (XSS) vulnerability in Vivvo CMS before 4.1.1 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2009-02-06 No fix listed CWE-79

Vulnerabilities

Filters

files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal…

Cross-site request forgery (CSRF) vulnerability in Vivvo CMS before 4.0.4 allows remote…

Cross-site scripting (XSS) vulnerability in Vivvo CMS before 4.1.1 allows remote…