← Back

Six Offene Systeme Gmbh

six_offene_systeme_gmbh

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Sixcms
sixcms

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Six Offene Systeme Gmbh
1Sixcms
Apr 16, 2026
Jun 16, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to inject arbitrary script code or HTML via the page parameter.
1Six Offene Systeme Gmbh
1Sixcms
Apr 16, 2026
Jun 16, 2006
N/A· v4
N/A· v3
2.6 LOW· v2
Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the templ...Show more
Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the template parameter.Show less