PT-2020-7903

Name of the Vulnerable Software and Affected Versions: Textpattern version 4.5.7 Description: The issue allows an unprivileged author to change an article's markup setting. Recommendations: For Textpattern version 4.5.7, at the moment, there is no information about a newer version that contains a...

CVE-2015-8033: Weak Password Requirements

In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account...

PT-2020-7904

Name of the Vulnerable Software and Affected Versions: Textpattern version 4.5.7 Description: The password-reset feature in the affected version does not securely tether a hash to a user account. Recommendations: For Textpattern version 4.5.7, consider disabling the password-reset feature until a...

CVE-2015-8032: Improper Privilege Management

In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...

File upload vulnerability in tx***_fi***.php file in TextpatternCMS backend

TextpatternCMS is a content management system written in PHP. A file upload vulnerability exists in the txfi.php file in the backend of TextpatternCMS. It allows an attacker to upload a webshell and gain server privileges...

SQL Code Injection

textpattern/lock is vulnerable to SQL injection. The attacker can launch the attack via the "qty" on the page index.php with authentication as administrator...

Textpattern CMS 'qty' SQL Injection Vulnerability

Textpattern CMS is an open source content management system CMS developed by the Textpattern team. The system supports creating, editing and publishing content. A SQL injection vulnerability exists in Textpattern CMS 4.6.2 and earlier versions. A remote attacker can use the 'qty' parameter on the...

textpattern denial of service vulnerability

textpattern is an excellent blogging system. A security vulnerability exists in the Import XML feature in textpattern version 4.6.2. An attacker can exploit this vulnerability by uploading a specially crafted XML file to cause a denial of service exhaustion of server memory resources...

CVE-2018-7474

An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" on the page index.php...

CVE-2018-7474

An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" on the page index.php...

Code injection

An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" on the page index.php...

CVE-2018-7474

An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" on the page index.php...

CVE-2018-7474

Summary (validated by multiple sources): Textpattern CMS 4.6.2 and earlier is vulnerable to SQL injection through the value of the qty parameter on the index.php page. The vulnerability is exploitable in contexts where an attacker with administrator-facing access can trigger the flaw, potentially...

CVE-2018-7474: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" on the page index.php...

PT-2018-18090

Name of the Vulnerable Software and Affected Versions Textpattern CMS versions 4.6.2 and earlier Description An issue allows SQL code injection in the qty variable on the "index.php" page. Recommendations For Textpattern CMS versions 4.6.2 and earlier, update to a version later than 4.6.2 to...

CVE-2018-1000090

textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web server by exhausting server memory resources. This attack appear to be exploitable via Uploading a specially crafted XML file...

CVE-2018-1000090

textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web server by exhausting server memory resources. This attack appear to be exploitable via Uploading a specially crafted XML file...

Design/Logic Flaw

textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web server by exhausting server memory resources. This attack appear to be exploitable via Uploading a specially crafted XML file...

CVE-2018-1000090

CVE-2018-1000090 affects Textpattern 4.6.2, where the Import XML feature is vulnerable to an XML Injection that can cause a Denial of Service by exhausting server memory. The exploit is described as uploading a specially crafted XML file; exploitation status is noted in sources, but there are no ...

CVE-2018-1000090

textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web server by exhausting server memory resources. This attack appear to be exploitable via Uploading a specially crafted XML file...