Vulnerabilities > CMS Faethon > CMS Faethon > 1.3.2
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-06-23 | CVE-2006-3186 | Cross-Site Scripting vulnerability in CMS Faethon CMS Faethon 1.3.2 Multiple cross-site scripting (XSS) vulnerabilities in CMS Faethon 1.3.2 allow remote attackers to inject arbitrary web script or HTML via the mainpath parameter to (1) data/footer.php and (2) admin/header.php. network cms-faethon | 4.3 |
| 2006-06-23 | CVE-2006-3185 | Remote File Include vulnerability in CMS Faethon CMS Faethon 1.3.2 PHP remote file inclusion vulnerability in data/header.php in CMS Faethon 1.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter. | 7.5 |