Stash

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Stash records in CISA KEV

No Stash vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Stash 3 records LOW

Records

3 records in Stash · all components

TI-2008-03915 CVE-2008-4081 · GHSA-w23j-m5qf-8f8w

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain…

LOW 38

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02561 Published 2008-09-15 No fix listed CWE-287

TI-2008-03914 CVE-2008-4080 · GHSA-mq5f-vwpq-7wpj

SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows…

LOW 36

SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the (1) username parameter to admin/library/authenticate.php and the (2) downlo…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03108 Published 2008-09-15 No fix listed CWE-89

TI-2008-04375 CVE-2008-4590 · GHSA-c4qx-x23h-48j9

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to admin/login.php and (2) the post parameter to admin/news.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-10-16 No fix listed CWE-89

Open these records in search →

Critical	0
High	3
Medium	1
Low	0
No CVSS	0