Membrepass

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Membrepass records in CISA KEV

No Membrepass vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Membrepass 3 records LOW

Records

3 records in Membrepass · all components

TI-2006-04375 CVE-2006-4529 · GHSA-f5vj-rpp3-rw8v

SQL injection vulnerability in recherchemembre.php in membrepass 1.5.

LOW 37

SQL injection vulnerability in recherchemembre.php in membrepass 1.5.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02099 Published 2006-09-01 No fix listed

TI-2006-04376 CVE-2006-4530 · GHSA-97qx-c6q5-4f9j

Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows…

LOW 36

Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute arbitrary PHP code via the aifon parameter, which is injected into include/variable.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01709 Published 2006-09-01 No fix listed

TI-2006-04374 CVE-2006-4528 · GHSA-7gg8-gg4j-88c2

Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) recherche parameter in recherchemembre.php and the (2) email parameter in te…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01342 Published 2006-09-01 No fix listed

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0