← Back

Roseonlinecms

roseonlinecms

Vendor: Roseonlinecms • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-4581
1Roseonlinecms
1Roseonlinecms
Apr 23, 2026
Jan 6, 2010
N/A· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal...Show more
Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the admin parameter.Show less
CVE-2007-1636
1Roseonlinecms
1Roseonlinecms
Apr 23, 2026
Mar 23, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the op parameter, as demonstrated by injecting PHP code into Apache l...Show more
Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the op parameter, as demonstrated by injecting PHP code into Apache log files via the URL and User-Agent HTTP header.Show less