Firefly

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Firefly records in CISA KEV

No Firefly vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Firefly 2 records MEDIUM Media Server 2 records MEDIUM

Records

2 records in Firefly · all components

TI-2007-02372 CVE-2007-2456 · GHSA-7mph-9r86-93q7

Multiple PHP remote file inclusion vulnerabilities in FireFly 1.1.01 allow remote…

MEDIUM 45

Multiple PHP remote file inclusion vulnerabilities in FireFly 1.1.01 allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to (1) localize.php or (2) config.php in modules/admin/include…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09462 Published 2007-05-02 No fix listed

TI-2007-02376 CVE-2007-2460 · GHSA-pmm6-hpj2-3r8h

PHP remote file inclusion vulnerability in modules/admin/include/config.php in FireFly…

LOW 36

PHP remote file inclusion vulnerability in modules/admin/include/config.php in FireFly 1.1.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01797 Published 2007-05-02 No fix listed

Open these records in search →

Critical	0
High	4
Medium	0
Low	0
No CVSS	0