Drake Team

8 CVEs across 1 Drake Team products. Browse Drake Team vulnerabilities, severities, and proof-of-concept exploits.

Drake Team products with known CVEs

ProductCVEs
Drake Cms8
Drake Team CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2008-64752009-03-16SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and earlier allows remote attackers to execute…
CVE-2008-13712008-03-18Absolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote attackers to read and execute arbitrary files via a full pathn…
CVE-2007-66952008-02-01Cross-site scripting (XSS) vulnerability in index.php in Drake CMS 0.4.9 allows remote attackers to inject arbitrary web script or HTML via the option paramete…
CVE-2007-26182007-05-11CRLF injection vulnerability in index.php in Drake CMS 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attac…
CVE-2007-18502007-04-03Directory traversal vulnerability in classes/captcha/captcha.jpg.php in Drake CMS allows remote attackers to read arbitrary files or list arbitrary directories…
CVE-2007-18492007-04-03Directory traversal vulnerability in 404.php in Drake CMS allows remote attackers to include and execute arbitrary local arbitrary files via a .. (dot dot) in…
CVE-2007-18482007-04-03Cross-site scripting (XSS) vulnerability in admin/classes/ui.dta.php in Drake CMS allows remote attackers to inject arbitrary web script or HTML via the desc[]…
CVE-2006-57672006-11-06PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remote attackers to execute arbitrary PHP cod…