Etomite

Etomite

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2011-4264

  • EPSS 0.23%
  • Veröffentlicht 08.12.2011 11:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in Etomite before 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3

CVE-2008-0820

Exploit
  • EPSS 0.54%
  • Veröffentlicht 19.02.2008 20:44:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in index.php in Etomite 0.6.1.4 Final allows remote attackers to inject arbitrary web script or HTML via $_SERVER['PHP_INFO']. NOTE: the vendor disputes this issue in a followup, stating that the affected var...

7.5

CVE-2006-7070

Exploit
  • EPSS 14.46%
  • Veröffentlicht 02.03.2007 21:18:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite CMS 0.6.1 and earlier allows remote attackers to upload and execute arbitrary files via an nfile[] parameter with a filename that contains a .php extension...

5.8

CVE-2006-6047

Exploit
  • EPSS 15.15%
  • Veröffentlicht 22.11.2006 00:07:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the f parameter, as demonstrated by injecting PHP sequences into a...

6.8

CVE-2006-6048

Exploit
  • EPSS 1.32%
  • Veröffentlicht 22.11.2006 00:07:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

SQL injection vulnerability in index.php in Etomite CMS 0.6.1.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.

7.5

CVE-2006-5242

  • EPSS 0.5%
  • Veröffentlicht 12.10.2006 00:07:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

SQL injection vulnerability in Etomite Content Management System (CMS) before 0.6.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

6.8

CVE-2006-3904

  • EPSS 3.31%
  • Veröffentlicht 27.07.2006 22:04:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.

7.5

CVE-2006-0325

  • EPSS 2.6%
  • Veröffentlicht 20.01.2006 21:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary comman...