2 results (0.002 seconds)
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVSS: 6.8EPSS: 1%CPEs: 3EXPL: 1
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2004-1203
https://notcve.org/view.php?id=CVE-2004-1203
15 Dec 2004 — parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path. • http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029499.html •
CVSS: 6.8EPSS: 1%CPEs: 3EXPL: 1CVE-2004-1202
https://notcve.org/view.php?id=CVE-2004-1202
15 Dec 2004 — Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to inject arbitrary web script or HTML via the file parameter. • http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029499.html •