CVE-2011-3702
Published Sep 23, 2011Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonst…
Vendor archive
anantasoft CVEs
Beta · best-effort7 CVEs tagged to vendor anantasoft — 0 Critical, 1 High, 6 Medium, 0 Low, 0 Unrated.
CVE-2009-3182
Published Sep 11, 2009Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file…
CVE-2009-3181
Published Sep 11, 2009Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the customizetemplate parameter in a dir…
CVE-2009-3180
Published Sep 11, 2009Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php.
CVE-2009-3171
Published Sep 11, 2009Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user parame…
CVE-2009-3167
Published Sep 11, 2009Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot)…
CVE-2008-6665
Published Apr 8, 2009change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code in…
Showing 1-7 of 7 CVEsPage 1 of 1