Campsite@3.3.0 Security Vulnerabilities and Issues — Campsite@3.3.0 CVE List

Lucene search

Campware.orgCampsite3.3.0

4 matches found

CVE•added 2010/05/07 11:0 p.m.•58 views

CVE-2010-1867

SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.

7.5CVSS8.5AI score0.00791EPSS

CVE•added 2009/06/23 9:30 p.m.•39 views

CVE-2009-2181

Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter.

4.3CVSS5.8AI score0.00254EPSS

CVE•added 2009/06/23 9:30 p.m.•36 views

CVE-2009-2182

Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, and (6) set-author.php in admin...

6.8CVSS7.8AI score0.00582EPSS

CVE•added 2009/06/23 9:30 p.m.•35 views

CVE-2009-2183

Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the GLOBALS[g_campsiteDir] parameter.

7.5CVSS7.3AI score0.00908EPSS