Vulnerabilities

TI-2007-06348 CVE-2007-6652 · GHSA-cf9h-mc58-gqvq

cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit…

MEDIUM 40

cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection attacks and execute arbitrary code via the testo_0 parameter…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04154 Published 2008-01-04 No fix listed CWE-94

TI-2007-06300 CVE-2007-6604 · GHSA-777g-xq74-4w6p

Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow…

LOW 29

Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03624 Published 2007-12-31 No fix listed CWE-22

TI-2007-04877 CVE-2007-5060 · GHSA-7qh9-92w2-gfw9

Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin…

LOW 22

Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in XCMS allows remote attackers to change arbitrary passwords via certain password_ and rpassword_ parameters, po…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00883 Published 2007-09-24 No fix listed CWE-352

Vulnerabilities

Filters

cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit…

Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow…

Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin…