Tutorialcms Security Vulnerabilities and Issues — Tutorialcms CVE List

Wavelink MediaTutorialcms

4 matches found

CVE•added 2007/05/11 10:0 a.m.•56 views

CVE-2007-2600

CVE-2007-2600 involves multiple reflected XSS vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via: (1) the catFile parameter to browseCat.php or browseSubCat.php; (2) the id parameter to openTutori...

6.8CVSS5.8AI score0.02782EPSS

Web

CVE•added 2007/05/22 9:0 p.m.•51 views

CVE-2007-2822

TutorialCMS

9.3CVSS7AI score0.04416EPSS

CVE•added 2008/01/15 7:0 p.m.•50 views

CVE-2008-0254

CVE-2008-0254 is a SQL injection vulnerability in TutorialCMS (Photoshop Tutorials) 1.02, affecting activate.php. When magic_quotes_gpc is disabled, remote attackers can inject SQL via the userName parameter. Documented impact is partial confidentiality/integrity/availability with CVSS 2.0 base s...

6.8CVSS8.4AI score0.00914EPSS

CVE•added 2007/05/11 10:0 a.m.•48 views

CVE-2007-2599

TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier contains multiple SQL injection vulnerabilities. The affected components include (1) catFile parameter for browseCat.php and browseSubCat.php, (2) id parameter for openTutorial.php, topFrame.php, and admin/editListing.php, and (3) the search ...

7.5CVSS8.5AI score0.03726EPSS

Web