Vigilecms: >> Vigilecms >> 1.4 Security Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the (1) vedipm or (2) live_chat module.
CVSS Score
4.3
EPSS Score
0.018
Published
2007-11-22
Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the module parameter.
CVSS Score
9.3
EPSS Score
0.024
Published
2007-11-22
Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote attackers to change the admin password via certain parameters to the changepass module.
CVSS Score
6.8
EPSS Score
0.002
Published
2007-11-22