← Back

Contentcustomizer

contentcustomizer

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Contentcustomizer
contentcustomizer
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-5817
1Contentcustomizer
1Contentcustomizer
Apr 23, 2026
Nov 5, 2007
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (1) del, (2) delbackup, (3) res, or (4) ren action. NOTE: this issue can be leveraged to conduct cros...Show more
dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (1) del, (2) delbackup, (3) res, or (4) ren action. NOTE: this issue can be leveraged to conduct cross-site scripting (XSS) and possibly other attacks.Show less
CVE-2007-5816
1Contentcustomizer
1Contentcustomizer
Apr 23, 2026
Nov 5, 2007
N/A· v4
N/A· v3
5.0 MEDIUM· v2
dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to obtain sensitive author credentials by making a request with an editauthor action, then reading the value of the newlocalpassword password inpu...Show more
dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to obtain sensitive author credentials by making a request with an editauthor action, then reading the value of the newlocalpassword password input field in the HTML source of the resulting page.Show less