5 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name...
CVE-2006-2307
Cross-site scripting XSS vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name...
CVE-2006-2307
Cross-site scripting XSS vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name...
CVE-2006-2307
CVE-2006-2307 describes a cross-site scripting (XSS) vulnerability in Website Baker CMS prior to 2.6.4. The issue allows remote attackers to inject arbitrary web script or HTML via a user display name. The provided connected documents confirm the vendor/product and the vulnerable version range, a...
wbaker_260_xpl.txt
Website Baker Login bypass - remote code execution software: site: http://www.websitebaker.org/2/home/ description: "Website Baker 2, the Open Source Content Management System designed to enable users to produce websites with ease." if magicquotesgpc off you can bypass admin login check and grant...