Vulnerabilities > Tribiq > Tribiq CMS > 5.0.10b

DATE CVE VULNERABILITY TITLE RISK
2014-12-30 CVE-2011-2727 Information Exposure vulnerability in Tribiq CMS
The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
network
tribiq CWE-200
4.3
2009-01-23 CVE-2008-5961 Cross-Site Scripting vulnerability in Tribiq CMS 5.0.10B/5.0.11E
Cross-site scripting (XSS) vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parameter in a document action.
network
tribiq CWE-79
4.3
2009-01-23 CVE-2008-5960 SQL Injection vulnerability in Tribiq CMS 5.0.10B/5.0.11E
SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action.
network
low complexity
tribiq CWE-89
7.5