VYPR

Phpadultsite CMS

by Phpadultsite

CVEs (3)

  • CVE-2008-6979Aug 19, 2009
    risk 0.03cvss epss 0.00

    Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to inject arbitrary web script or HTML via the results_per_page parameter to index.php. NOTE: some of these details are obtained from third party information. NOTE: this issue might be resultant from a separate SQL injection vulnerability.

  • CVE-2008-6981Aug 19, 2009
    risk 0.00cvss epss 0.00

    index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an invalid results_per_page parameter, which leaks the path in an error message. NOTE: this issue might be resultant from a separate SQL injection vulnerability.

  • CVE-2008-6980Aug 19, 2009
    risk 0.00cvss epss 0.00

    SQL injection vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to execute arbitrary SQL commands via the results_per_page parameter to index.php. NOTE: some of these details are obtained from third party information.