Ant!-Tr0J4N

#14890of 60,594
21.1Total CVSS
Vulnerabilities · 4
Medium
3
High
1
PT-2011-1812
2011-10-07
4.3
CVE-2010-4877
Nonecms
Nonecms
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `view` parameter in the "index.php" file.
PT-2011-2520
2011-01-25
4.3
CVE-2011-0642
N 13
N-13 News
A cross-site request forgery (CSRF) issue exists, allowing remote attackers to hijack administrator authentication for creating new users via the options action in the news/admin.php file.
PT-2010-3921
2010-06-18
7.5
CVE-2010-2335
Yamamah
Yamamah Photo Gallery
The issue allows remote attackers to execute arbitrary SQL commands via the `news` parameter in index.php.
PT-2010-3922
2010-06-18
5.0
CVE-2010-2336
Yamamah
Yamamah Photo Gallery
The issue allows remote attackers to obtain the source code of executable files within the web document root. This is achieved by exploiting the download parameter in the index.php file.