Epic Designs

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Epic Designs records in CISA KEV

No Epic Designs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Eggblog 7 records LOW Tinybb 3 records LOW

Records

3 records in Tinybb · all components

TI-2006-02648 CVE-2006-2740 · GHSA-x35w-3585-36xp

Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers…

LOW 37

Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) q parameter in (a) forgot.php, and the (2) username and (3) password parameters in (b)…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03971 Published 2006-06-01 No fix listed

TI-2006-02647 CVE-2006-2739 · GHSA-8hpv-v3h8-h6x2

PHP remote file inclusion vulnerability in footers.php in Epicdesigns tinyBB 0.3, when…

LOW 35

PHP remote file inclusion vulnerability in footers.php in Epicdesigns tinyBB 0.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the tinybb_footers parameter.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.08797 Published 2006-06-01 No fix listed

TI-2006-02649 CVE-2006-2741 · GHSA-x7qp-566q-p7r2

Cross-site scripting (XSS) vulnerability in Epicdesigns tinyBB 0.3 allow remote attackers…

LOW 33

Cross-site scripting (XSS) vulnerability in Epicdesigns tinyBB 0.3 allow remote attackers to inject arbitrary web script or HTML via the q parameter in forgot.php, which is echoed in an error message, and other unspecifi…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01638 Published 2006-06-01 No fix listed

Open these records in search →

Critical	0
High	3
Medium	7
Low	0
No CVSS	0