CVE-2010-1996

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with certain creation privileges, to inject arbitrary web script or HTML via the 1 content parameter in conjunction with a /admin/poll/add PATHINFO, the 2 meta parameter in...

CVE-2010-1995

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with "Add new article" privileges, to inject arbitrary web script or HTML via the 1 title, 2 subTitle, and 3 author parameters in conjunction with a /admin/news/article/add...

CVE-2010-1994

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...

CVE-2010-1996

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with certain creation privileges, to inject arbitrary web script or HTML via the 1 content parameter in conjunction with a /admin/poll/add PATHINFO, the 2 meta parameter in...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with certain creation privileges, to inject arbitrary web script or HTML via the 1 content parameter in conjunction with a /admin/poll/add PATHINFO, the 2 meta parameter in...

Sql injection

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...

CVE-2010-1995

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with "Add new article" privileges, to inject arbitrary web script or HTML via the 1 title, 2 subTitle, and 3 author parameters in conjunction with a /admin/news/article/add...

CVE-2010-1994

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...

CVE-2010-1994

TomatoCMS is affected by a SQL injection in the /news/search handler. The vulnerability is triggered via the q parameter (e.g., q=) and creates injectable SQL in conjunction with the PATH_INFO /news/search. Affects TomatoCMS prior to 2.0.5; 2.0.5 fixes the issue, with the vulnerability reappearin...

CVE-2010-1996

CVE-2010-1996 involves multiple cross-site scripting (XSS) vulnerabilities in TomatoCMS (index.php) prior to 2.0.5. The flaws allow remote authenticated users with certain creation privileges to inject arbitrary script/HTML via (1) content with /admin/poll/add PATH_INFO, (2) meta with /admin/cate...

CVE-2010-1996

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with certain creation privileges, to inject arbitrary web script or HTML via the 1 content parameter in conjunction with a /admin/poll/add PATHINFO, the 2 meta parameter in...

CVE-2010-1995

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with "Add new article" privileges, to inject arbitrary web script or HTML via the 1 title, 2 subTitle, and 3 author parameters in conjunction with a /admin/news/article/add...

CVE-2010-1995

TomatoCMS is affected by CVE-2010-1995, with multiple XSS vulnerabilities in index.php before version 2.0.5. The issue allows remote authenticated users who have “Add new article” privileges to inject arbitrary script or HTML via the title, subTitle, and author parameters when accessing /admin/ne...

CVE-2010-1994: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...

CVE-2010-1996: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with certain creation privileges, to inject arbitrary web script or HTML via the 1 content parameter in conjunction with a /admin/poll/add PATHINFO, the 2 meta parameter in...

CVE-2010-1995: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with "Add new article" privileges, to inject arbitrary web script or HTML via the 1 title, 2 subTitle, and 3 author parameters in conjunction with a /admin/news/article/add...

TomatoCMS 2.0.4多个SQL注入和HTML注入漏洞

BUGTRAQ: 40108 TomatoCMS没有正确地过滤提交给index.php/news/search页面的q参数便在SQL查询中使用，没有正确地过滤提交给 index.php/admin/news/article/add页面的title、subTitle和author参数便显示给了用户，远程攻击者可以通过提交恶意参数请求执行SQL注入或HTML注入攻击。 TomatoCMS 2.0.4 厂商补丁： TIG --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://tomatocms.com/...

Secunia Research: TomatoCMS "q" SQL Injection Vulnerability

====================================================================== Secunia Research 10/05/2010 - TomatoCMS "q" SQL Injection Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: TomatoCMS Script Insertion Vulnerabilities

====================================================================== Secunia Research 10/05/2010 - TomatoCMS Script Insertion Vulnerabilities - ====================================================================== Table of Contents Affected...

TomatoCMS 2.0.x - SQL Injection

source: https://www.securityfocus.com/bid/40108/info TomatoCMS is prone to a SQL-injection vulnerability and multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to compromise the application,...