CVE-2008-2985

CVE-2008-2985 describes a directory traversal vulnerability in CMReams CMS 1.3.1.1 Beta 2, exposed when register_globals is enabled. An attacker can cause the application to include and execute arbitrary local files by supplying directory traversal sequences in the page_language parameter of load...

CVE-2008-2984

The CVE-2008-2984 entry concerns a documented XSS in CMReams CMS 1.3.1.1 Beta 2, specifically in backend/umleitung.php. The vulnerability is triggered via the lang[be_red_text] parameter and allows remote attackers to inject arbitrary web script/HTML. Based on the connected documents, affected so...