Wf-sections

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Wf-sections records in CISA KEV

No Wf-sections vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wf-sections 2 records MEDIUM

Records

2 records

TI-2007-01896 CVE-2007-1974 · GHSA-c3h9-q6vg-353f

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in…

MEDIUM 41

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as used in Xoops modules such as (1) Zmagazine 1.0, (2) Happy Linux XFsection 1.07 and earlier, and po…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05532 Published 2007-04-12 No fix listed

TI-2005-00672 CVE-2005-0725 · GHSA-w26q-jp2w-2hvw

SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for…

LOW 35

SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01036 Published 2005-03-12 No fix listed

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0