Xecms
by Xecms
CVEs (2)
| CVE | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2007-6508 | 0.04 | — | 0.07 | Dec 21, 2007 | Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F (dot dot slash) in the list parameter. | ||
| CVE-2008-6714 | 0.03 | — | 0.03 | Apr 10, 2009 | admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_username cookie. |
- CVE-2007-6508Dec 21, 2007risk 0.04cvss —epss 0.07
Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F (dot dot slash) in the list parameter.
- CVE-2008-6714Apr 10, 2009risk 0.03cvss —epss 0.03
admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_username cookie.