CVE-2013-4900

CVE-2013-4900 describes a directory traversal in DeWeS Web Server (0.4.2 and possibly earlier), used with Twilight CMS, allowing remote attackers to read arbitrary files via a dot-dot-encoded backslash (e.g., ..%5c) in a GET request. Connected sources confirm the vulnerable component and the expl...

CVE-2013-4899

CVE-2013-4899 concerns Twilight CMS (v5.17 and earlier). The issue is an XSS vulnerability where user-supplied data appended to "/gallery/" is insufficiently filtered, allowing a remote attacker to inject arbitrary script via PATH_INFO and execute in the context of a logged-in user. The advisory ...

CVE-2009-3856

Twilight CMS