Socketkb

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Socketkb records in CISA KEV

No Socketkb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Socketkb 3 records LOW

Records

3 records in Socketkb · all components

TI-2005-03729 CVE-2005-3936 · GHSA-w944-h3rr-xq2p

PHP file include vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to…

LOW 36

PHP file include vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to include arbitrary local files via the __f parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01532 Published 2005-12-01 No fix listed

TI-2005-03728 CVE-2005-3935 · GHSA-vw4c-q8wp-8vfx

SQL injection vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to…

LOW 35

SQL injection vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) node and (2) art_id parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01162 Published 2005-12-01 No fix listed

TI-2007-05427 CVE-2007-5647 · GHSA-m225-c64g-66w2

Multiple cross-site scripting (XSS) vulnerabilities in SocketKB 1.1.5 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in SocketKB 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) art_id or (2) node parameter in an article action to the default URI.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01484 Published 2007-10-23 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0