Punctweb

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Punctweb records in CISA KEV

No Punctweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Myco Guestbook 2 records LOW

Records

2 records in Myco Guestbook · all components

TI-2006-00486 CVE-2006-0500 · GHSA-q8c5-8hq3-g4xm

MyCO Guestbook 1.0 stores the admin directory under the web document root with…

LOW 36

MyCO Guestbook 1.0 stores the admin directory under the web document root with insufficient access control, which allows remote attackers to perform unspecified privileged actions by directly accessing files via a URL.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01317 Published 2006-02-01 No fix listed

TI-2006-00487 CVE-2006-0501 · GHSA-pc9r-2p8j-qq9x

Cross-site scripting (XSS) vulnerability in MyCO Guestbook 1.0 allows remote attackers to…

LOW 22

Cross-site scripting (XSS) vulnerability in MyCO Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the Name field, when registering a user.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2006-02-01 No fix listed

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0