Citrusdb

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Citrusdb records in CISA KEV

No Citrusdb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Citrusdb 4 records MEDIUM Citrusdb Customer Database 1 record LOW

Records

4 records in Citrusdb · all components

TI-2005-00366 CVE-2005-0408 · GHSA-6vj4-7pwq-5wq3

CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for…

MEDIUM 50

CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to bypass authentication and gain privileges by calculating the MD5 checksum of th…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04735 Published 2005-02-16 No fix listed CWE-916

TI-2005-00369 CVE-2005-0411 · GHSA-4rcx-jwpr-7mp7

Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows…

LOW 37

Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary PHP files via ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02407 Published 2005-02-16 No fix listed

TI-2005-00367 CVE-2005-0409 · GHSA-6gw3-9jpp-7crr

CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2)…

LOW 37

CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information such as the pathnames for…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.05657 Published 2005-02-16 No fix listed

TI-2005-00368 CVE-2005-0410 · GHSA-cfgg-m2mw-qh5g

SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote…

LOW 27

SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV file.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01848 Published 2005-02-16 No fix listed

Open these records in search →

Critical	1
High	1
Medium	3
Low	0
No CVSS	0