Xaraya

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Xaraya records in CISA KEV

No Xaraya vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xaraya 3 records LOW

Records

3 records

TI-2007-02169 CVE-2007-2251 · GHSA-842j-cgp8-h39h

Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows…

LOW 36

Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspecified vectors, probably related to incorrect permission checking in xartemplates/user-view.xd.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01422 Published 2007-04-25 No fix listed

TI-2005-03722 CVE-2005-3929 · GHSA-53vr-5mjf-jhrq

Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in…

LOW 33

Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attackers to create directories and overwrite arbitrary files via ".." sequences in the module parameter to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07502 Published 2005-11-30 No fix listed

TI-2013-03181 CVE-2013-3639 · GHSA-w98g-pj62-qv85

Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) interface, (3) name, or (4) tabmodule parameter to inde…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03217 Published 2014-02-05 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0