GCVE - cpe:2.3:a:tinx_cms:tinx_cms:1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tinx_cms:tinx_cms:1.1:*:*:*:*:*:*:*

part: a version: 1.1 update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:sourceforge/tinx-cms`	purl2cpe	2026-06-01 10:16:54.965296

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-2976`	vulnerable	2026-06-08 04:50:32.754887	Details available Multiple directory traversal vulnerabilities in TinX/cms 1.1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) language parameter to (a) include_me.php, (b) admin/ajax.php, and (c) admin/objects/catalog.ajaxhandler.php; and the (2) prefix parameter to (d) admin/inc/config.php. Published: 2008-07-02T17:00:00.000Z Updated: 2024-08-07T09:21:34.978Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/5917 https://exchange.xforce.ibmcloud.com/vulnerabilities/43305 http://www.securityfocus.com/bid/29907	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2975`	vulnerable	2026-06-08 04:50:32.754509	Details available Cross-site scripting (XSS) vulnerability in admin/objects/obj_image.php in TinX/cms 1.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter. Published: 2008-07-02T17:00:00.000Z Updated: 2024-08-07T09:21:34.563Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/5917 https://exchange.xforce.ibmcloud.com/vulnerabilities/43306 http://www.securityfocus.com/bid/29907	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.