| Max CVSS | 5.0 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-3551 | 5.0 |
toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a direct request to the appropriate XML file.
|
19-10-2018 - 15:37 | 16-11-2005 - 07:42 | |
| CVE-2005-3550 | 5.0 |
Directory traversal vulnerability in admin.php in toendaCMS before 0.6.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the id_user parameter.
|
19-10-2018 - 15:37 | 16-11-2005 - 07:42 |