Citrusdb

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Citrusdb records in CISA KEV

No Citrusdb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Citrusdb 4 records MEDIUM Citrusdb Customer Database 1 record LOW

Records

1 record in Citrusdb Customer Database · all components

TI-2005-00195 CVE-2005-0229 · GHSA-w7r9-gc37-g6x5

CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root…

LOW 33

CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07652 Published 2005-02-14 No fix listed

Open these records in search →

Critical	1
High	1
Medium	3
Low	0
No CVSS	0