← Back

Etouch

etouch

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Samepage
samepage
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-2071
1Etouch
1Samepage
May 6, 2026
Feb 24, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the filepath parameter.
CVE-2015-2070
1Etouch
1Samepage
May 6, 2026
Feb 24, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitrary SQL commands via the catId parameter to cm/blogrss/feed.