EUVD-2007-6056

Malware in sbrugna...

EUVD-2007-6055

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the module parameter...

CVE-2007-6087

CVE-2007-6087 is a CSRF vulnerability in VigileCMS 1.4. The index.php changepass module accepts certain parameters that allow remote attackers to change the admin password. Affected component is the VigileCMS 1.4 web application; underlying issue is cross-site request forgery enabling unauthorize...

CVE-2007-6085

CVE-2007-6085 relates to multiple cross-site scripting (XSS) flaws in VigileCMS 1.4 affecting index.php, where an attacker can inject arbitrary script/HTML through the message field in the vedipm or live_chat modules. Impact is described as partial integrity impact with no confidentiality or avai...

CVE-2007-6086

CVE-2007-6086 is a directory-traversal vulnerability in VigileCMS 1.4. The issue occurs in index.php where directory traversal sequences in the module parameter allow remote attackers to include and execute arbitrary local files. This leads to arbitrary code execution and partial/complete comprom...