Tomatocms
7 CVEs across 1 Tomatocms products. Browse Tomatocms vulnerabilities, severities, and proof-of-concept exploits.
Tomatocms products with known CVEs
Tomatocms CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2010-2282 | | | 2010-06-15 | Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication of administrators for requests that cha… |
CVE-2010-2281 | | | 2010-06-15 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS 2.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) k… |
CVE-2010-1515 | | | 2010-06-15 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS 2.0.6 and earlier allow remote attackers to inject arbitrary web script or HTML v… |
CVE-2010-1514 | | | 2010-06-15 | Unrestricted file upload vulnerability in TomatoCMS 2.0.6 and earlier allows remote authenticated users, with certain privileges, to execute arbitrary PHP code… |
CVE-2010-1996 | | | 2010-05-20 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with certain creation privileges… |
CVE-2010-1995 | | | 2010-05-20 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with "Add new article" privileges… |
CVE-2010-1994 | | | 2010-05-20 | SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction… |