Skip to main content

Vendor/product archive

tribiq / tribiq_cms CVEs

Beta · best-effort

8 CVEs tagged to tribiq / tribiq_cms0 Critical, 3 High, 4 Medium, 1 Low, 0 Unrated.

CVE-2011-2727

Published Dec 30, 2014

The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers t…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2012-5312

Published Oct 8, 2012

SQL injection vulnerability in Tribiq CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2009-2220

Published Jun 26, 2009

Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and possib…

CVSS 5.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2008-6804

Published May 11, 2009

Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG cookies. N…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2008-5961

Published Jan 23, 2009

Cross-site scripting (XSS) vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parame…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2008-5960

Published Jan 23, 2009

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2008-4894

Published Nov 4, 2008

Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled and magic_quotes_gpc is…

CVSS 5.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2008-4893

Published Nov 4, 2008

Cross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled, allows remote a…

CVSS 2.6 · Low
Vendor/product tagsBeta · best-effort
Showing 1-8 of 8 CVEsPage 1 of 1