Weekly Drawing Contest

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Weekly Drawing Contest records in CISA KEV

No Weekly Drawing Contest vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Weekly Drawing Contest 3 records LOW

Records

3 records

TI-2007-01544 CVE-2007-1603 · GHSA-hh8j-fwrg-jw56

admin/contest.php in Weekly Drawing Contest 0.0.1 allows remote attackers to bypass…

LOW 36

admin/contest.php in Weekly Drawing Contest 0.0.1 allows remote attackers to bypass authentication, and insert new contest information into a database, via a direct POST request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01403 Published 2007-03-22 No fix listed

TI-2007-01543 CVE-2007-1602 · GHSA-f4rm-54hw-fq9v

SQL injection vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows…

LOW 35

SQL injection vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to execute arbitrary SQL commands via the order parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01052 Published 2007-03-22 No fix listed

TI-2007-01542 CVE-2007-1601 · GHSA-5hjh-923j-ff4c

Directory traversal vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1…

LOW 26

Directory traversal vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01515 Published 2007-03-22 No fix listed

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0