CVE-2003-1459

CVE-2003-1459 affects ttCMS 2.2 and ttForum, with multiple PHP remote file inclusion vulnerabilities. The issue allows remote attackers to execute arbitrary PHP code via (1) the template parameter in News.php or (2) the installdir parameter in install.php. Exploitation details indicate that this ...

CVE-2003-1458

CVE-2003-1458 affects ttCMS 2.2 and ttForum via a SQL injection vulnerability in Profile.php, exploitable through the member name to execute arbitrary SQL commands. The vulnerability is remote and the documented impact is partial confidentiality, integrity, and availability. Exploitation details ...

CVE-2007-1708

The CVE-2007-1708 entry describes a PHP remote file inclusion in ttCMS, affecting ttCMS 4 and earlier. The vulnerability resides in lib/db/ez_sql.php and allows an attacker to execute arbitrary PHP code by supplying a URL in the lib_path parameter that is included by the application. This leads t...

CVE-2003-0331

The vulnerability CVE-2003-0331 affects ttForum, with SQL injection possible via the Ignorelist-Textfield in the Preferences page. The underlying flaw allows remote attackers to execute arbitrary SQL and obtain ttForum Administrator privileges. No specific affected versions or patches are provide...