Ariadne Cms vulnerabilities

CVE-2005-1181 [HIGH] CVE-2005-1181: NOTE: this issue has been disputed by the vendor. PHP remote code injection vulnerability in loader NOTE: this issue has been disputed by the vendor. PHP remote code injection vulnerability in loader.php for Ariadne CMS 2.4 allows remote attackers to execute arbitrary PHP code by modifying the ariadne parameter to reference a URL on a remote web server that contains the code. NOTE: the vendor has disputed this issue, saying that loader.php first requires the "

CVE-2006-5776 [HIGH] CVE-2006-5776: Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PH Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PHP code via the ariadne parameter in (1) ftp/loader.php and (2) lib/includes/loader.cmd.php. NOTE: this issue is disputed by CVE, since installation instructions recommend that the files be placed outside of the web document root and require the administrator to m

CVE-2007-2433 [MEDIUM] CVE-2007-2433: Cross-site scripting (XSS) vulnerability in index.php in Ariadne 2.4.1 allows remote attackers to in Cross-site scripting (XSS) vulnerability in index.php in Ariadne 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the ARLogin parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.