Vendor/product archive

xomol / xomol_cms CVEs

Beta · best-effort

3 CVEs tagged to xomol / xomol_cms — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to xomol vendor archive

CVE-2008-3202

Published Jul 17, 2008

Cross-site scripting (XSS) vulnerability in index.php in Xomol CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the current_url parameter in a tellafrien…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2008-2483

Published May 28, 2008

Directory traversal vulnerability in index.php in Xomol CMS 1.20071213 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the op parameter.

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2008-2484

Published May 28, 2008

SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the email parame…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1