CVE-2008-2975

The CVE-2008-2975 vulnerability affects TinX/cms 1.1, specifically the admin/objects/obj_image.php component. It is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the language parameter. The NVD lists a MEDIUM severity (CVSSv2 4.3) with n...

CVE-2008-2976

TinX/cms 1.1 is affected by multiple directory traversal vulnerabilities. When register_globals is enabled, remote attackers can cause local file inclusion via directory traversal sequences in the language parameter to include_me.php, admin/ajax.php, and admin/objects/catalog.ajaxhandler.php, and...

CVE-2008-2975

Cross-site scripting XSS vulnerability in admin/objects/objimage.php in TinX/cms 1.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter...

CVE-2008-2975: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/objects/objimage.php in TinX/cms 1.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter...

CVE-2008-2976: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in TinX/cms 1.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 language parameter to a includeme.php, b admin/ajax.php, and c...

TinX CMS 1.1 (LFI/XSS) Multiple Remote Vulnerabilities

No description provided by source. ┌┌───────────────────────────────────────────────────────────────────────────┐br / ││ C r a C k E r ┌┘br / ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││br /...

tinx-lfixss.txt

┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...

TinX CMS 1.1 (LFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== TinX CMS 1.1 LFI/XSS Multiple Remote Vulnerabilities ======================================================...