CVE-2011-5255

CVE-2011-5255 corresponds to multiple XSS weaknesses in X3 CMS, affecting admin/login for version 0.4.3.1 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML via PATH_INFO, username, or password parameters. Reports in the connected documents confirm the a...

CVE-2014-8772

The CVE CVE-2014-8772 affects X3 CMS versions 0.5.1 and 0.5.1.1. The vulnerability is a Cross-site scripting (XSS) issue in the search_controller that allows remote authenticated users to inject arbitrary web script or HTML via the search parameter. The NVD entry lists a CVSS2 base score of 3.5 (...

CVE-2014-8771

CVE-2014-8771 affects X3 CMS versions 0.5.1 and 0.5.1.1, with multiple CSRF vulnerabilities in the admin area that allow remote attackers to hijack administrator authentication via unspecified vectors. Exploitation details are not provided in the available documents. The entry’s CVSS assessment i...