← Back

Cwh Underground

cwh_underground

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Demo4 Cms
demo4_cms
Contentnow Cms
contentnow_cms

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Cwh Underground
1Contentnow Cms
Apr 23, 2026
Jul 15, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in upload/file/language_menu.php in ContentNow CMS 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) pageid parameter or (2) PATH_INFO.
1Cwh Underground
1Demo4 Cms
Apr 23, 2026
Jul 2, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter.