Hans Oesterholt : Security Vulnerabilities, CVEs, Published In 2009
Cross-site scripting (XSS) vulnerability in admin.php (aka the login page) in Content Management Made Easy (CMME) before 1.22 allows remote attackers to inject arbitrary web script or HTML via the username field.
Max CVSS
4.3
EPSS Score
0.16%
Published
2009-07-07
Updated
2009-07-08
Content Management Made Easy (CMME) 1.19 allows remote attackers to obtain system information via a direct request to info.php, which invokes the phpinfo function.
Max CVSS
5.0
EPSS Score
0.43%
Published
2009-02-18
Updated
2018-10-11
2 vulnerabilities found