Voc-project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Voc-project records in CISA KEV

No Voc-project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Voodoo Chat 2 records LOW

Records

2 records in Voodoo Chat · all components

TI-2006-03867 CVE-2006-3991 · GHSA-pqfj-gv24-v62j

PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b…

LOW 38

PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02537 Published 2006-08-05 No fix listed

TI-2006-06633 CVE-2006-6890 · GHSA-4g2q-4rfm-6xj2

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient…

LOW 37

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02276 Published 2007-01-05 No fix listed

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0