PT-2024-27804

Name of the Vulnerable Software and Affected Versions TWCMS version 2.0.3 Description The issue allows a remote attacker to execute arbitrary code. This is achieved via the "/TWCMS-gh-pages/twcms/runtime/twcms view/default,index.htm.php" endpoint, where PHP directly echoes parameters input from...

CVE-2024-37878: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in TWCMS v.2.0.3 allows a remote attacker to execute arbitrary code via the /TWCMS-gh-pages/twcms/runtime/twcmsview/default,index.htm.php" PHP directly echoes parameters input from external sources...