Vulnerabilities > Toenda Software Development > Toendacms > 0.6.beta.2

DATE CVE VULNERABILITY TITLE RISK
2006-06-03 CVE-2006-2799 Cross-Site Scripting vulnerability in ToendaCMS
Cross-site scripting (XSS) vulnerability in content_footer.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or HTML via the print_url variable.
6.8
2005-12-16 CVE-2005-4277 Cross-Site Scripting vulnerability in ToendaCMS
Cross-site scripting (XSS) vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject arbitrary web script or HTML via the id parameter.
4.3