Campsite Security Vulnerabilities and Issues — Campsite CVE List

Lucene search

Campware.orgCampsite

8 matches found

CVE•added 2010/05/07 11:0 p.m.•58 views

CVE-2010-1867

SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.

7.5CVSS8.5AI score0.00791EPSS

CVE•added 2009/06/23 9:30 p.m.•39 views

CVE-2009-2181

Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter.

4.3CVSS5.8AI score0.00254EPSS

CVE•added 2009/06/23 9:30 p.m.•36 views

CVE-2009-2182

Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, and (6) set-author.php in admin...

6.8CVSS7.8AI score0.00582EPSS

CVE•added 2009/06/23 9:30 p.m.•35 views

CVE-2009-2183

Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the GLOBALS[g_campsiteDir] parameter.

7.5CVSS7.3AI score0.00908EPSS

CVE•added 2006/11/15 3:7 p.m.•33 views

CVE-2006-5910

Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) bugreporter/thankyou.php and (2) feedback/thankyou.php in implementation/management/priv/.

7.5CVSS8AI score0.03294EPSS

CVE•added 2006/11/15 3:7 p.m.•33 views

CVE-2006-5912

Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a "Security fix for you-know-what," possibly related to encrypted passwords.

10CVSS7.1AI score0.00446EPSS

CVE•added 2006/01/16 9:0 p.m.•31 views

CVE-2005-4661

The notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a certain unencrypted MySQL password, which allows remote attackers to sniff the password.

5CVSS7AI score0.00404EPSS

CVE•added 2006/11/15 3:7 p.m.•31 views

CVE-2006-5911

Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleI...

7.5CVSS8AI score0.02503EPSS