Idmos: >> Idmos >> 1.0-beta Security Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in IDMOS 1.0-beta (aka Phoenix) allow remote attackers to inject arbitrary web script or HTML via the (1) err_msg parameter to error.php and the (2) content parameter to templates/simple/ia.php.
CVSS Score
2.6
EPSS Score
0.065
Published
2007-10-09
PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta (aka Phoenix) allows remote attackers to execute arbitrary PHP code via a URL in the site_absolute_path parameter.
CVSS Score
6.8
EPSS Score
0.055
Published
2007-10-09