Dir2web

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Dir2web records in CISA KEV

No Dir2web vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dir2web 2 records LOW

Records

2 records in Dir2web · all components

TI-2012-03482 CVE-2012-4070 · GHSA-ph3q-964q-9783

SQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote…

LOW 35

SQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote attackers to execute arbitrary SQL commands via the oid parameter in a homepage action to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01019 Published 2012-08-12 No fix listed CWE-89

TI-2012-03481 CVE-2012-4069 · GHSA-r5j4-3q84-5pc3

Dir2web 3.0 stores sensitive information under the web root with insufficient access…

LOW 25

Dir2web 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request for system/db/website.db.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01186 Published 2012-08-12 No fix listed CWE-264

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0