Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.5
CVE-2014-8772
- EPSS 0.19%
- Published 03.12.2014 18:59:02
- Last modified 12.04.2025 10:46:40
Cross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and 0.5.1.1 allows remote authenticated users to inject arbitrary web script or HTML via the search parameter.
6.8
CVE-2014-8771
- EPSS 0.12%
- Published 03.12.2014 18:59:01
- Last modified 12.04.2025 10:46:40
Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors.
4.3
CVE-2011-5255
- EPSS 0.62%
- Published 31.01.2013 05:44:00
- Last modified 11.04.2025 00:51:21
Multiple cross-site scripting (XSS) vulnerabilities in admin/login in X3 CMS 0.4.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, (2) username, or (3) password parameter.
1