Scripts.oldguy

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Scripts.oldguy records in CISA KEV

No Scripts.oldguy vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Talkback · all components

TI-2009-04610 CVE-2009-4854 · GHSA-r52w-77wx-rpqg

LOW 38

addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03121 Published 2010-05-07 No fix listed CWE-20

TI-2009-04630 CVE-2009-4874 · GHSA-4f4x-r49q-p83m

LOW 33

TalkBack 2.3.14 does not properly restrict access to the edit comment feature (comments.php), which allows remote attackers to modify comments.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02605 Published 2010-05-26 No fix listed CWE-264