CVE-2009-3747

CVE-2009-3747 describes a cross-site scripting (XSS) vulnerability in TBmnetCMS 1.0, specifically in the index.php file where an attacker can inject arbitrary web script or HTML via the content parameter. The issue was originally reported for tbmnet.php, but that program does not exist in TBmnetC...

CVE-2008-6271

CVE-2008-6271 affects TBmnetCMS 1.0 where a directory traversal vulnerability exists in index.php. The root cause is the ability to manipulate the content parameter with a .. sequence when magic_quotes_gpc is disabled, enabling remote attackers to read arbitrary files. Documented impact is partia...