Mtcms - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2008-01-15.

Products

• Mtcms - 4 CVEs

Newest CVEs of Mtcms

• CVE-2008-0280 - CVSS 7.5 (high), 2008-01-15: SQL injection vulnerability in index.php in MTCMS 2.0 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via the (1) a or…
• CVE-2007-1129 - CVSS 7.5 (high), 2007-02-27: Multiple unrestricted file upload vulnerabilities in MTCMS 3.2 allow remote attackers to upload and execute files via (1) an avatar upload in an add_down…
• CVE-2007-1132 - CVSS 4.3 (medium), 2007-02-27: Multiple cross-site scripting (XSS) vulnerabilities in the "Contact Us" functionality in MTCMS 2.2 allow remote attackers to inject arbitrary web script or…
• CVE-2006-6796 - CVSS 6.8 (medium), 2006-12-28: PHP remote file inclusion vulnerability in admin/admin_settings.php in MTCMS 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL…