F3site

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

F3site records in CISA KEV

No F3site vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

F3site 2 records LOW

Records

2 records in F3site · all components

TI-2007-00744 CVE-2007-0763 · GHSA-jwrq-9c4q-cr4g

Cross-site scripting (XSS) vulnerability in the news comment functionality in F3Site 2.1…

LOW 34

Cross-site scripting (XSS) vulnerability in the news comment functionality in F3Site 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the Autor field.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0188 Published 2007-02-06 No fix listed

TI-2007-00745 CVE-2007-0764 · GHSA-968m-m85v-6fjp

Unrestricted file upload vulnerability in F3Site 2.1 and earlier allows remote…

LOW 33

Unrestricted file upload vulnerability in F3Site 2.1 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP scripts via GIF86 header in a file in the uplf parameter, which can be later…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0226 Published 2007-02-06 No fix listed

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0