Entertainment Cms: Security Vulnerabilities
Directory traversal vulnerability in custom.php in Entertainment Media Sharing CMS allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pagename parameter.
CVSS Score
7.5
EPSS Score
0.062
Published
2007-07-26
Entertainment CMS allows remote attackers to bypass authentication and perform certain administrative actions by setting the adminLogged cookie to "Administrator."
CVSS Score
7.5
EPSS Score
0.006
Published
2007-07-11