Hans Oesterholt: >> Cmme >> 1.19 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in admin.php (aka the login page) in Content Management Made Easy (CMME) before 1.22 allows remote attackers to inject arbitrary web script or HTML via the username field.
CVSS Score
4.3
EPSS Score
0.003
Published
2009-07-07
Content Management Made Easy (CMME) 1.19 allows remote attackers to obtain system information via a direct request to info.php, which invokes the phpinfo function.
CVSS Score
5.0
EPSS Score
0.003
Published
2009-02-18