Vulnerabilities

TI-2010-02224 CVE-2010-2317 · GHSA-64x6-5686-c98f

Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers…

LOW 37

Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search, (2) sbr, (3) pid, (4) sbl, and (5) FilePath parameters to default.asp; and the…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01999 Published 2010-06-17 No fix listed CWE-89

TI-2010-02223 CVE-2010-2316 · GHSA-wwqp-pxgc-w8wf

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in WmsCms 2.0 and…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) sbr, (3) p, and (4) sbl parameters, diffe…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02962 Published 2010-06-17 No fix listed CWE-79

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers…

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in WmsCms 2.0 and…