Vendor/product archive

elinestudio / site_composer CVEs

Beta · best-effort

4 CVEs tagged to elinestudio / site_composer — 0 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to elinestudio vendor archive

CVE-2008-2861

Published Jun 25, 2008

Multiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) to…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2008-2862

Published Jun 25, 2008

Multiple SQL injection vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to ansF…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2008-2863

Published Jun 25, 2008

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2008-2864

Published Jun 25, 2008

eLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) trigger.asp or (2) common2.asp in cms/include/,…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1