36 matches found
[SECURITY] Fedora 36 Update: golang-github-liamg-tml-0.6.0-2.fc36
A Go module and standalone binary to make the output of colored/formatted text in the terminal easier and more readable...
TML 0.5 index.php form Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15876/info TML CMS is prone to multiple input validation vulnerabilities. Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of...
TML 0.5 index.php id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15876/info TML CMS is prone to multiple input validation vulnerabilities. Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of...
CVE-2005-4416
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2005-4415
Cross-site scripting XSS vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web script or HTML via the form parameter...
CVE-2005-4415
Cross-site scripting XSS vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web script or HTML via the form parameter...
CVE-2005-4416
The CVE-2005-4416 issue affects TML CMS 0.5 and is caused by a SQL injection in the index.php file, allowing remote attackers to insert or alter SQL commands via the id parameter . The available sources (NVD/CVE records) report this as a direct vulnerability with the impact of enabling partial co...
CVE-2005-4415
CVE-2005-4415 describes a cross-site scripting (XSS) vulnerability in index.php of TML CMS 0.5 , allowing remote attackers to inject arbitrary web script or HTML via the form parameter. The known impact is partial integrity loss and potential user-script execution, with the CVSS base score of 4.3...
TML 0.5 - 'index.php?form' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15876/info TML CMS is prone to multiple input validation vulnerabilities. Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication...
TML 0.5 - 'index.php?id' SQL Injection
source: https://www.securityfocus.com/bid/15876/info TML CMS is prone to multiple input validation vulnerabilities. Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication...
TML 0.5 - index.php?id SQL Injection
TML 0.5 - index.php?id SQL Injection source: https://www.securityfocus.com/bid/15876/info TML CMS is prone to multiple input validation vulnerabilities. Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft ...
TML 0.5 - index.php?form Cross-Site Scripting
TML 0.5 - index.php?form Cross-Site Scripting source: https://www.securityfocus.com/bid/15876/info TML CMS is prone to multiple input validation vulnerabilities. Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, t...
CVE-2005-4149
Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via direct requests, which leaks the installation path, SQL queries, or product code in diagnostic messages...
CVE-2005-4149
Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via direct requests, which leaks the installation path, SQL queries, or product code in diagnostic messages...
CVE-2005-4149
CVE-2005-4149 affects Lyris ListManager 8.8–8.9b, where remote attackers can trigger errors in TML scripts to leak sensitive data in diagnostic messages (installation path, SQL queries, product code). Impact is information disclosure via error messages exposed by normal requests to nonexistent pa...
CVE-2005-4147
The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml TCL files via 1 a request with a trailing null byte %00, which might also require 2 an authentication bypass step that involves a username with a trailing "@" characters...