Browse CVEs

MEDIUM 5.3 CVE-2022-32277 Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate authorization when submitting a re… Matrix Mitigation only Fix from $1,6002022-09-06 CRITICAL 9.1 CVE-2019-19374 An issue was discovered in core/assets/form/form_question_types/form_question_type_file_upload/form_question_type_file_upload.inc in Squiz Matrix CMS… Matrix 5.5.0.3 / 5.5.1.8+ Fix from $2,3002019-12-11 HIGH 7.5 CVE-2019-19373 An issue was discovered in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3.3 where … Matrix 5.5.0.3 / 5.5.1.8+ Fix from $1,9502019-12-11 HIGH 8.8 CVE-2017-14198 An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause… Matrix after 5.3.6.0 Fix from $1,9502017-11-30 HIGH 7.5 CVE-2017-14196 An issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3. An information disclosure caused by a Path Traversal issue in the 'F… Matrix after 5.3.6.1 Fix from $1,9502017-11-30 MEDIUM 6.1 CVE-2017-14197 An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. There are multiple reflected Cross-Site Scripting (XSS) issues in Ma… Matrix after 5.3.6.0 Fix from $1,6002017-11-30 MEDIUM 6.8 CVE-2006-5036 MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy server via the sq_remote_page_url p… Mysource Classic after 3.8 Fix from $1,6002006-09-27 MEDIUM 6.8 CVE-2006-5037 MySource Matrix after 3.8 allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in the sq_content_src paramet… Mysource Matrix Mitigation only Fix from $1,6002006-09-27 MEDIUM 6.5 CVE-2006-4635 Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject a… Mysource Classic after 2.14.6 Fix from $1,6002006-09-08