CVE-2007-6159

The CVE-2007-6159 entry describes an SQL injection in index.php of Tilde CMS 4.x and earlier, exploitable via the aarstal parameter in the yeardetail action. This allows remote attackers to execute arbitrary SQL commands and is noted as a vector different from CVE-2006-1500.

CVE-2006-1500

CVE-2006-1500 describes a SQL injection in the Tilde CMS 3.0 implementation of index.php, exploitable via the id parameter to allow remote execution of arbitrary SQL commands. The related NVD entry lists a base score of 7.5 (HIGH) with NETWORK attack vector and no authentication, and partial impa...

CVE-2007-6160

CVE-2007-6160 describes a cross-site scripting (XSS) vulnerability in the index.php of Tilde CMS 4.x and earlier . The issue allows remote attackers to inject arbitrary web script or HTML via the aarstal parameter in a yeardetail action. The provided documents confirm the affected product/version...

CVE-2007-6161

This CVE (CVE-2007-6161) affects index.php in Tilde CMS 4.x and earlier, where a specific value in a search action can disclose the path of sensitive information. In the sources, the vulnerability is described as a path-disclosure issue via a search parameter, with a CVSS v2 base score of 5.0 (Me...