Bwired

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Bwired records in CISA KEV

No Bwired vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Bwired · all components

TI-2007-03853 CVE-2007-3976 · GHSA-978x-vf2g-q5gr

LOW 35

SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the newsID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01029 Published 2007-07-25 No fix listed

TI-2007-03855 CVE-2007-3978 · GHSA-f34f-q8xr-m883

LOW 24

Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02016 Published 2007-07-25 No fix listed CWE-255

TI-2007-03854 CVE-2007-3977 · GHSA-m6cg-292h-c82c

LOW 23

Cross-site scripting (XSS) vulnerability in bwired allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01273 Published 2007-07-25 No fix listed CWE-79