Lucene search
ZtmlEzportal Ztml Cms
3 matches found
CVE-2006-4501
SQL injection vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) about, (2) album, (3) id, (4) use, (5) desc, (6) doc, (7) mname, (8) max, and possibly other parameters.
7.5CVSS8.8AI score0.00492EPSS
Web
CVE-2006-4500
Cross-site scripting (XSS) vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) about, (2) again, (3) lastname, (4) email, (5) password, (6) album, (7) id, (8) table, (9) desc, (10) doc, (11) mname, (12) max, (13) htpl, (14) ...
4.3CVSS6.1AI score0.00333EPSS
Web
CVE-2006-4502
ezPortal/ztml CMS 1.0 allows remote attackers to bypass authentication controls via a direct request to the "Administration Area" script.
7.5CVSS7.3AI score0.0062EPSS