4site

4site Cms

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2010-4152

Exploit
  • EPSS 0.12%
  • Published 03.11.2010 20:00:02
  • Last modified 11.04.2025 00:51:21

SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646.

7.5

CVE-2009-0646

Exploit
  • EPSS 1.63%
  • Published 18.02.2009 23:30:00
  • Last modified 09.04.2025 00:30:58

Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login and (2) password parameters to pcgi/4site.pl, (3) page parameter to print/print.shtml, (4) s and (5) i para...