Tribiq

Tribiq Cms

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2011-2727

  • EPSS 0.25%
  • Veröffentlicht 30.12.2014 02:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers to obtain sensitive information via a direct request, which reveals the ...

7.5

CVE-2012-5312

Exploit
  • EPSS 0.18%
  • Veröffentlicht 08.10.2012 17:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

SQL injection vulnerability in Tribiq CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

5.1

CVE-2009-2220

Exploit
  • EPSS 1.68%
  • Veröffentlicht 26.06.2009 15:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and possibly execute arbitrary files via directory traversal sequences in the tem...

7.5

CVE-2008-6804

Exploit
  • EPSS 1.59%
  • Veröffentlicht 11.05.2009 20:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG cookies. NOTE: a third party reports that the vendor disputes the existence of th...

7.5

CVE-2008-5960

  • EPSS 0.37%
  • Veröffentlicht 23.01.2009 19:00:05
  • Zuletzt bearbeitet 09.04.2025 00:30:58

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the detai...

4.3

CVE-2008-5961

  • EPSS 0.26%
  • Veröffentlicht 23.01.2009 19:00:05
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parameter in a document action. NOTE: the provenance of this information is ...

2.6

CVE-2008-4893

  • EPSS 0.21%
  • Veröffentlicht 04.11.2008 00:58:39
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the template_path p...

5.1

CVE-2008-4894

  • EPSS 3.01%
  • Veröffentlicht 04.11.2008 00:58:39
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary loc...