Sitedepth » Sitedepth Cms : Security Vulnerabilities, CVEs, CVSS score >= 2
Directory traversal vulnerability in ShowImage.php in SiteDepth CMS 3.44 allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.
Max CVSS
5.0
EPSS Score
1.86%
Published
2007-06-26
Updated
2017-10-11
PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SD_DIR parameter.
Max CVSS
5.1
EPSS Score
22.31%
Published
2006-07-24
Updated
2018-10-17
2 vulnerabilities found