Saurus Cms@4.7.0 Security Vulnerabilities and Issues — Saurus Cms@4.7.0 CVE List

Lucene search

SaurusSaurus Cms4.7.0

2 matches found

CVE•added 2015/02/09 11:59 a.m.•42 views

CVE-2015-1562

Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to admin/user_management.php, (2) data_search parameter to /admin/profile_data.php, or (3) filter parameter to error_log.php.

4.3CVSS5.9AI score0.004EPSS

CVE•added 2010/05/20 5:30 p.m.•36 views

CVE-2010-1997

Cross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to inject arbitrary web script or HTML via the pealkiri parameter.

2.1CVSS5.5AI score0.00459EPSS