Vendors / Twig Development Team Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Twig Development Team records in CISA KEV No Twig Development Team vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0138 · Published 2002-05-03 · No fix listed
Priority LOW 36
Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remote attackers to insert arbitrary PHP (PHP3) code by specifying an alternate vhosts as an argument to t…
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0163 · Published 2002-06-25 · No fix listed
Priority LOW 35
Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01132 · Published 2002-06-11 · No fix listed
Open these records in search → All records by CVSS severity
0 3 0 0 0
THREATIST.IORead the docs