David Ravenscroft

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

David Ravenscroft records in CISA KEV

No David Ravenscroft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hithost 2 records LOW

Records

2 records

TI-2006-01194 CVE-2006-1235 · GHSA-573q-w8g3-fjq8

Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow…

LOW 26

Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote attackers to delete directories (possibly only empty directories) via the $deleteuser variable.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01598 Published 2006-03-14 No fix listed

TI-2006-01111 CVE-2006-1144 · GHSA-8f26-gfv3-vw59

Cross-site scripting (XSS) vulnerability in HitHost 1.0.0 allows remote attackers to…

LOW 21

Cross-site scripting (XSS) vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML via (1) the user parameter in deleteuser.php and (2) the hits parameter in viewuser.php.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.05037 Published 2006-03-10 No fix listed

Open these records in search →

Critical	0
High	0
Medium	1
Low	1
No CVSS	0