CVE-2006-5759

The connected PT-2006-6440 entry confirms a path-disclosure vulnerability in Rhadrix If-CMS, affecting versions 1.01–2.07. The issue arises when empty arguments rns[] or pag[] are provided, causing an error message that reveals the web server’s full filesystem path. This can aid an attacker in lo...

CVE-2006-5761

CVE-2006-5761 describes a cross-site scripting (XSS) vulnerability in Rhadrix If-CMS, specifically in index.php where the rns parameter can be exploited to inject arbitrary web script or HTML. Affected software: Rhadrix If-CMS versions 1.01 through 2.07. Root cause is improper handling of the rns...

CVE-2009-0528

CVE-2009-0528 describes a SQL injection in frame.php of Rhadrix If-CMS 2.07 and earlier, exploitable via the id parameter. Affected software is Rhadrix If-CMS (version 2.07 and earlier); the underlying issue is improper handling of user input in frame.php, enabling remote attackers to execute arb...