CVE-2008-2976

TinX/cms 1.1 is affected by multiple directory traversal vulnerabilities. When register_globals is enabled, remote attackers can cause local file inclusion via directory traversal sequences in the language parameter to include_me.php, admin/ajax.php, and admin/objects/catalog.ajaxhandler.php, and...

CVE-2008-2975

The CVE-2008-2975 vulnerability affects TinX/cms 1.1, specifically the admin/objects/obj_image.php component. It is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the language parameter. The NVD lists a MEDIUM severity (CVSSv2 4.3) with n...