Vulnerabilities > Openrat > Openrat CMS

DATE CVE VULNERABILITY TITLE RISK
2007-08-08 CVE-2007-4175 Cross-Site Scripting vulnerability in OpenRat
Multiple cross-site scripting (XSS) vulnerabilities in index.php in OpenRat CMS 0.8-beta1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) subaction and (2) action parameters.
network
openrat
4.3
2007-08-03 CVE-2007-4141 Cross-Site Scripting vulnerability in Openrat CMS 0.8Beta1
OpenRat CMS 0.8-beta1 and earlier allows remote attackers to obtain sensitive information via a request containing an XSS sequence in the action parameter to index.php, which reveals the path in an error message.
network
openrat
4.3