Vendor/product archive

wavelink_media / tutorialcms CVEs

Beta · best-effort

4 CVEs tagged to wavelink_media / tutorialcms — 1 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to wavelink_media vendor archive

CVE-2008-0254

Published Jan 15, 2008

SQL injection vulnerability in activate.php in TutorialCMS (aka Photoshop Tutorials) 1.02, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL comm…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2007-2822

Published May 22, 2007

TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the (1) loggedIn and (2) activated parameters to (a) login.php…

CVSS 9.3 · Critical

Vendor/product tagsBeta · best-effort

CVE-2007-2599

Published May 11, 2007

Multiple SQL injection vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) catFile param…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2007-2600

Published May 11, 2007

Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to inject arbitrary web script or HTML via the…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1