Tincan

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Tincan records in CISA KEV

No Tincan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phplist 14 records MEDIUM Webbler Cms 3 records LOW

Records

3 records in Webbler Cms · all components

TI-2007-03941 CVE-2007-4073 · GHSA-qhhg-x68m-7rh6

Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which…

LOW 25

Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which allows remote attackers to send arbitrary amounts of forged e-mail.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01222 Published 2007-07-30 No fix listed

TI-2007-03940 CVE-2007-4072 · GHSA-hvcp-w92q-c45m

Webbler CMS before 3.1.6 provides the full installation path within HTML comments in…

LOW 25

Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows remote attackers to obtain sensitive information by viewing the HTML source, as demonstrated by viewing…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01218 Published 2007-07-30 No fix listed

TI-2007-03939 CVE-2007-4071 · GHSA-2vh3-v4c9-q7c6

Multiple cross-site scripting (XSS) vulnerabilities in uploader/index.php in Webbler CMS…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in uploader/index.php in Webbler CMS before 3.1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) login parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01217 Published 2007-07-30 No fix listed

Open these records in search →

Critical	0
High	3
Medium	14
Low	0
No CVSS	0