Search vulnerabilities

Results 3

CVE-2017-2123

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php.

CVSS 3.0 · 6.1 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2017-2124

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2020-5640

Local file inclusion vulnerability in OneThird CMS v1.96c and earlier allows a remote unauthenticated attacker to execute arbitrary code or obtain sensitive information via unspecified vectors.

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Products