Positive Software

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Positive Software records in CISA KEV

No Positive Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

H-sphere 8 records MEDIUM Sitestudio 3 records MEDIUM Cp+ 1 record LOW H-sphere Winbox 1 record LOW

Records

3 records in Sitestudio · all components

TI-2007-02545 CVE-2007-2633 · GHSA-c4rj-xq5w-qw4w

Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to…

MEDIUM 47

Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a ..

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0242 Published 2007-05-13 No fix listed

TI-2008-01003 CVE-2008-1049 · GHSA-83v8-qcwm-rr33

Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as…

MEDIUM 46

Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11, has unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01541 Published 2008-02-27 No fix listed

TI-2005-01516 CVE-2005-1605 · GHSA-wg9h-2v5g-pjhg

Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows…

LOW 33

Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to (1) psoft.guestbook.GuestBookServ in Standalone Site Studi…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01519 Published 2005-05-16 No fix listed

Open these records in search →

Critical	2
High	3
Medium	6
Low	1
No CVSS	0