1two

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

1two records in CISA KEV

No 1two vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

1two News 2 records LOW Livre D Or 1 record LOW

Records

2 records in 1two News · all components

TI-2005-01494 CVE-2005-1583 · GHSA-c48c-3wpr-6cj3

1Two News 1.0 allows remote attackers to (1) delete images for new stories via a direct…

LOW 25

1Two News 1.0 allows remote attackers to (1) delete images for new stories via a direct request to admin/delete.php or (2) upload arbitrary images via a direct request to admin/upload.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01121 Published 2005-05-14 No fix listed

TI-2005-01493 CVE-2005-1582 · GHSA-g767-2hg2-m92r

Cross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) nom, (2) email, (3) siteweb, or (4) commentaire variables.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0101 Published 2005-05-14 No fix listed

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0