Vulnerabilities

TI-2008-03064 CVE-2008-3202 · GHSA-p8mq-xv89-9v46

Cross-site scripting (XSS) vulnerability in index.php in Xomol CMS 1.2 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in Xomol CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the current_url parameter in a tellafriend action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01465 Published 2008-07-17 No fix listed CWE-79

TI-2008-02376 CVE-2008-2484 · GHSA-qmxv-fxjc-8h95

SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magic_quotes_gpc…

LOW 32

SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the email parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00942 Published 2008-05-28 No fix listed CWE-89

TI-2008-02375 CVE-2008-2483 · GHSA-3m84-9frj-pv4f

Directory traversal vulnerability in index.php in Xomol CMS 1.20071213 allows remote…

LOW 34

Directory traversal vulnerability in index.php in Xomol CMS 1.20071213 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01915 Published 2008-05-28 No fix listed CWE-22

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in index.php in Xomol CMS 1.2 allows remote…

SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magic_quotes_gpc…

Directory traversal vulnerability in index.php in Xomol CMS 1.20071213 allows remote…