Vulnerabilities > Contentserv

DATE CVE VULNERABILITY TITLE RISK
2006-12-04 CVE-2006-6277 Local File Include vulnerability in Contentserv 4.0/4.1
Directory traversal vulnerability in admin/FileServer.php in ContentServ 4.x allows remote attackers to read arbitrary files via a ..
network
low complexity
contentserv
5.0
2005-12-20 CVE-2005-4390 SQL Injection vulnerability in ContentServ
SQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the StoryID parameter.
network
low complexity
contentserv
7.5
2005-09-27 CVE-2005-3086 Local File Include vulnerability in Contentserv 3.1
Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers to read or include arbitrary files via ".." sequences in the ctsWebsite parameter.
network
low complexity
contentserv
6.4