Siteman is a narrowly scoped vendor with a focused product footprint centered on a single application. The vendor's disclosure history centers on web-application weaknesses including path traversal and cross-site scripting, and its vulnerabilities have a strong tendency to acquire public exploit code. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Siteman over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-2081HIGH Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the m | May 5, 2008 | 9.0 | 33 | NO | YES |
CVE-2005-0305HIGH CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate oper | May 2, 2005 | 7.5 | 31 | NO | YES |
CVE-2008-0452MEDIUM Directory traversal vulnerability in articles.php in Siteman 1.1.9 allows remote attackers to read arbitrary files via directory traversal sequences in the cat parameter in a viewa | Jan 25, 2008 | 5.0 | 23 | NO | YES |
CVE-2008-2082MEDIUM Cross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers to inject arbitrary web script or HTML via the module parameter, which leaks the pat | May 5, 2008 | 4.3 | 21 | NO | YES |
CVE-2007-0593MEDIUM Siteman 1.1.11 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via | Jan 30, 2007 | 5.0 | 15 | NO | NO |
CVE-2007-0594MEDIUM Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via | Jan 30, 2007 | 5.0 | 15 | NO | NO |
CVE-2008-4365MEDIUM Cross-site scripting (XSS) vulnerability in search.php in Siteman 1.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the | Sep 30, 2008 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Siteman.
Media articles that mention a CVE ID that affects a product developed by Siteman — matched by CVE ID, not by vendor name.