CVE-2006-4985

Grayscale BandSite CMS is affected by multiple cross-site scripting (XSS) vulnerabilities identified as CVE-2006-4985. The description enumerates numerous injectable points across the admin panel and content modules, including: (1) max_file_size_purdy in adminpanel/includes/helpfiles/help_mp3.php...

CVE-2006-4984

Grayscale BandSite CMS is affected by CVE-2006-4984, a PHP remote file inclusion vulnerability. The issue allows an attacker to execute arbitrary PHP code via a URL passed in the GLOBALS[root_path] parameter to two vulnerable scripts: adminpanel/includes/mailinglist/mlist_xls.php and adminpanel/i...

CVE-2006-4986

CVE-2006-4986 affects Grayscale BandSite CMS. The connected documents confirm an information-disclosure vulnerability: an attacker can remotely obtain sensitive data by directly requesting a wide range of files across the site, including (1) files in includes/content, (2) includes/shows_preview.p...

CVE-2006-3193

CVE-2006-3193 and related records describe multiple PHP remote file inclusion (RFI) vulnerabilities in Grayscale BandSite CMS 1.1.1 that arise when register_globals is enabled. The issue allows an attacker to cause arbitrary PHP code execution by supplying a crafted URL in the root_path parameter...