Project Alumni

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Project Alumni records in CISA KEV

No Project Alumni vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Project Alumni 5 records LOW

Records

5 records in Project Alumni · all components

TI-2007-05899 CVE-2007-6184 · GHSA-5pp3-hq84-c694

Directory traversal vulnerability in index.php in Project Alumni 1.0.9 allows remote…

LOW 38

Directory traversal vulnerability in index.php in Project Alumni 1.0.9 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02539 Published 2007-11-30 No fix listed CWE-22

TI-2008-02037 CVE-2008-2118 · GHSA-hvvp-7q6p-3rmr

SQL injection vulnerability in info.php in Project Alumni 1.0.9 allows remote attackers…

LOW 35

SQL injection vulnerability in info.php in Project Alumni 1.0.9 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00971 Published 2008-05-08 No fix listed CWE-89

TI-2007-05847 CVE-2007-6127 · GHSA-pxhx-2v5w-x5mg

Multiple SQL injection vulnerabilities in project alumni 1.0.9 and earlier allow remote…

LOW 35

Multiple SQL injection vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the year parameter to (1) view.page.inc.php, which is reachable through a view actio…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01018 Published 2007-11-26 No fix listed CWE-89

TI-2007-05846 CVE-2007-6126 · GHSA-56cw-v7m3-5qr9

Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the year parameter to (1) xml/index.php; or (2) the year parameter…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01729 Published 2007-11-26 No fix listed CWE-79

TI-2008-02036 CVE-2008-2117 · GHSA-65m4-vmhq-5x4j

Cross-site scripting (XSS) vulnerability in pages/news.page.inc in Project Alumni 1.0.9…

LOW 23

Cross-site scripting (XSS) vulnerability in pages/news.page.inc in Project Alumni 1.0.9 allows remote attackers to inject arbitrary web script or HTML via the year parameter in a news action to index.php, a different vec…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01465 Published 2008-05-08 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	2
Low	0
No CVSS	0