CVE-2008-4487
- EPSS 0.39%
- Veröffentlicht 08.10.2008 02:00:01
- Zuletzt bearbeitet 09.04.2025 00:30:58
SQL injection vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) site_name, (2) email, (3) theme_chosen, (4) hp, (5) c_meta, (6) id, and (7) c_js parameters. NOTE: the provenance o...
CVE-2008-4488
- EPSS 0.3%
- Veröffentlicht 08.10.2008 02:00:01
- Zuletzt bearbeitet 09.04.2025 00:30:58
Cross-site scripting (XSS) vulnerability in ap-pages.php in Atarone CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) id parameters. NOTE: the provenance of this information is unknown; the details are...
- EPSS 0.3%
- Veröffentlicht 08.10.2008 02:00:01
- Zuletzt bearbeitet 09.04.2025 00:30:58
Directory traversal vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the theme_chosen parameter. NOTE: the provenance of this information is u...