CVE-2007-1432
Published Mar 13, 2007Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain privileges via direct requests with modified arguments in (1) the user_permissions parameter t…
Vendor archive
grayscale CVEs
Beta · best-effort7 CVEs tagged to vendor grayscale — 0 Critical, 3 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2007-1433
Published Mar 13, 2007Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment fie…
CVE-2007-1434
Published Mar 13, 2007SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a)…
CVE-2006-4984
Published Sep 26, 2006Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_path] parameter in…
CVE-2006-4985
Published Sep 26, 2006Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary web script or HTML via (1) the max_file_size_purdy paramet…
CVE-2006-4986
Published Sep 26, 2006Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for (1) certain files in the includes/content directory, (2) includes/shows_pre…
CVE-2006-3193
Published Jun 23, 2006Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a UR…
Showing 1-7 of 7 CVEsPage 1 of 1