Web4future

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Web4future records in CISA KEV

No Web4future vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

News Portal 2 records LOW Portal Solutions 2 records MEDIUM Edating Professional 1 record LOW Keyword Frequency Counter 1 record LOW

Records

6 records

TI-2005-03829 CVE-2005-4039 · GHSA-6x24-hm2g-9f7x

Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News…

MEDIUM 40

Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files via the dir parameter.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.03689 Published 2005-12-06 No fix listed

TI-2005-03828 CVE-2005-4038 · GHSA-p6mq-mfwr-x238

SQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal…

LOW 36

SQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal allows remote attackers to execute arbitrary SQL commands via the idp parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01333 Published 2005-12-06 No fix listed

TI-2005-03824 CVE-2005-4034 · GHSA-m7mq-hvr6-vqf7

Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote…

LOW 36

Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) pg, and (3) sortb parameters to (a) index.php; (4) cid parameter to…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0178 Published 2005-12-06 No fix listed

TI-2006-02185 CVE-2006-2244 · GHSA-72m3-qhvx-jm92

Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers…

LOW 31

Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) comentarii.php or (2) view.php.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01267 Published 2006-05-09 No fix listed

TI-2006-02184 CVE-2006-2243 · GHSA-gqwh-h8jw-f265

Multiple cross-site scripting (XSS) vulnerabilities in Web4Future News Portal allow…

LOW 28

Multiple cross-site scripting (XSS) vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to (1) comentarii.php or (2) view.php.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01171 Published 2006-05-09 No fix listed

TI-2005-03826 CVE-2005-4036 · GHSA-9mm7-wpqg-qhvm

Cross-site scripting (XSS) vulnerability in index.cgi in Web4Future KeyWord Frequency…

LOW 22

Cross-site scripting (XSS) vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0 allows remote attackers to inject arbitrary web script or HTML via the "remote URL."

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2005-12-06 No fix listed

Open these records in search →

Critical	0
High	3
Medium	3
Low	0
No CVSS	0