Read the docs

Uapplication

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Uapplication records in CISA KEV

No Uapplication vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Uphotogallery 4 records LOW Ublog Reload 3 records LOW Ublog 2 records LOW Uguestbook 1 record LOW

Records

1 record in Uguestbook · all components

TI-2005-01348 CVE-2005-1425 · GHSA-r2mv-8gp2-rvwg

Uapplication Uguestbook 1.0 stores sensitive information under the web root with…

Priority LOW 26

Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/guestbook.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01541 Published 2005-05-03 No fix listed CWE-264
Open these records in search →