Scoznet

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Scoznet records in CISA KEV

No Scoznet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Scozbook 3 records LOW Scoznews 1 record MEDIUM

Records

4 records

TI-2006-02419 CVE-2006-2487 · GHSA-cv3g-f3p5-pmfp

Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow…

MEDIUM 40

Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[main_path] parameter in (1) functions.php, (2) template.php, (…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04291 Published 2006-05-19 No fix listed

TI-2006-00073 CVE-2006-0079 · GHSA-ppxw-x8hv-g3q2

SQL injection vulnerability in auth.php in ScozNet ScozBook BETA 1.1 allows remote…

LOW 36

SQL injection vulnerability in auth.php in ScozNet ScozBook BETA 1.1 allows remote attackers to execute arbitrary SQL commands via the username field (adminname variable).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01315 Published 2006-01-04 No fix listed

TI-2003-01455 CVE-2003-1555 · GHSA-8qrx-6m7g-9m6f

ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive information via an…

LOW 28

ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive information via an invalid PG parameter in view.php, which reveals the installation path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03109 Published 2008-03-26 No fix listed CWE-200

TI-2003-01454 CVE-2003-1554 · GHSA-hgm3-7qf4-w3mx

Cross-site scripting (XSS) vulnerability in scozbook/add.php in ScozNet ScozBook 1.1 BETA…

LOW 23

Cross-site scripting (XSS) vulnerability in scozbook/add.php in ScozNet ScozBook 1.1 BETA allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) useremail, (3) aim, (4) msn, (5) sitename…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0127 Published 2008-03-26 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0