CVSS: 7.5EPSS: 1%CPEs: 4EXPL: 0CVE-2005-1840
https://notcve.org/view.php?id=CVE-2005-1840
02 Jun 2005 — Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbitrary files, as demonstrated using a .. (dot dot) in the language parameter to parser.php. • http://cvs.sourceforge.net/viewcvs.py/phpcms/phpcms/parser/include/class.layout_phpcms.php?rev=1.12.2.37&view=markup •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2004-1203
https://notcve.org/view.php?id=CVE-2004-1203
15 Dec 2004 — parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path. • http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029499.html •
CVSS: 6.8EPSS: 1%CPEs: 3EXPL: 1CVE-2004-1202
https://notcve.org/view.php?id=CVE-2004-1202
15 Dec 2004 — Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to inject arbitrary web script or HTML via the file parameter. • http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029499.html •