Iyziforum

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Iyziforum records in CISA KEV

No Iyziforum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Iyzi Forum 1 record LOW

Records

1 record

TI-2008-05597 CVE-2008-5901 · GHSA-hxpp-755m-rwxg

iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient…

LOW 37

iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing a password via a direct request for db/iyzifo…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0242 Published 2009-01-12 No fix listed CWE-264

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0