Vulnerabilities > Cmsnx

DATE CVE VULNERABILITY TITLE RISK
2009-12-04 CVE-2009-4206 SQL Injection vulnerability in Cmsnx Million Dollar Text Links
SQL injection vulnerability in admin.link.modify.php in Million Dollar Text Links 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
network
low complexity
cmsnx CWE-89
7.5
2009-06-01 CVE-2009-1854 Improper Authentication vulnerability in Cmsnx Million Dollar Text Links 1.0
Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the userid cookie to 1.
network
low complexity
cmsnx CWE-287
7.5
2008-05-16 CVE-2008-2277 SQL Injection vulnerability in Cmsnx Feedback and Rating Script 1.0
SQL injection vulnerability in detail.php in Feedback and Rating Script 1.0 allows remote attackers to execute arbitrary SQL commands via the listingid parameter.
network
low complexity
cmsnx CWE-89
7.5
2008-05-16 CVE-2008-2263 SQL Injection vulnerability in Cmsnx Automated Link Exchange Portal
SQL injection vulnerability in linking.page.php in Automated Link Exchange Portal allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
network
low complexity
cmsnx CWE-89
7.5