Vulnerabilities > Tribiq > Tribiq CMS > 5.0.11e
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2014-12-30 | CVE-2011-2727 | Information Exposure vulnerability in Tribiq CMS The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. | 4.3 |
2009-01-23 | CVE-2008-5961 | Cross-Site Scripting vulnerability in Tribiq CMS 5.0.10B/5.0.11E Cross-site scripting (XSS) vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parameter in a document action. | 4.3 |
2009-01-23 | CVE-2008-5960 | SQL Injection vulnerability in Tribiq CMS 5.0.10B/5.0.11E SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. | 7.5 |