Lucene search
+L

6 matches found

NVD
NVD
•added 2009/01/23 7:00 p.m.•24 views

CVE-2008-5960

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

7.5CVSS8.1AI score0.01001EPSS
SaveExploits0References2
Prion
Prion
•added 2009/01/23 7:00 p.m.•27 views

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

4.3CVSS6AI score0.00845EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2009/01/23 6:38 p.m.•55 views

CVE-2008-5960

Affected software: Tribiq CMS Community 5.0.10B and 5.0.11E. Vulnerability: SQL injection in index.php via the cID parameter in a document action. This allows remote attackers to execute arbitrary SQL commands. Root cause/impact: Not further detailed beyond the injection via cID; impacts confiden...

7.5CVSS8.3AI score0.01001EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2009/01/23 6:38 p.m.•57 views

CVE-2008-5961

CVE-2008-5961 is a cross-site scripting (XSS) vulnerability in Tribiq CMS Community versions 5.0.10B and 5.0.11E, exploitable via the cID parameter in a document action on index.php. The issue arises from inadequate input handling that allows an attacker to inject arbitrary script/HTML. Reported ...

4.3CVSS5.7AI score0.00845EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/01/23 12:00 a.m.•9 views

CVE-2008-5961: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

4.3CVSS6AI score0.00845EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/01/23 12:00 a.m.•6 views

CVE-2008-5960: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

7.5CVSS6.4AI score0.01001EPSS
SaveExploits0References2
Rows per page
Query Builder