Telephone

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Telephone records in CISA KEV

No Telephone vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Telephone Directory 2008 2 records LOW

Records

2 records

TI-2008-02560 CVE-2008-2678 · GHSA-4cqq-5g7w-w4rv

Multiple SQL injection vulnerabilities in Telephone Directory 2008, when magic_quotes_gpc…

LOW 37

Multiple SQL injection vulnerabilities in Telephone Directory 2008, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) code parameter in a confirm_data action to edit1…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02056 Published 2008-06-12 No fix listed CWE-89

TI-2008-02559 CVE-2008-2677 · GHSA-c53x-4hw4-h68r

Cross-site scripting (XSS) vulnerability in edit1.php in Telephone Directory 2008 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in edit1.php in Telephone Directory 2008 allows remote attackers to inject arbitrary web script or HTML via the action parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01507 Published 2008-06-12 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0