CVE-2015-1467

Multiple SQL injection vulnerabilities in Translations in Fork CMS before 3.8.6 allow remote authenticated users to execute arbitrary SQL commands via the 1 language or 2 type parameter to private/en/locale/index...

PT-2012-3116

Name of the Vulnerable Software and Affected Versions Fork CMS versions prior to 3.2.7 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the type or querystring parameters to the private/en/error endpoint or the name parameter to the...