Yektaweb

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Yektaweb records in CISA KEV

No Yektaweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Academic Web Tools 5 records LOW

Records

5 records

TI-2008-02844 CVE-2008-2970 · GHSA-92gf-gvw9-h948

Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and…

LOW 37

Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to hijack web sessions by setting the PHPSESSID parameter to (1) index.php and (2) logi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02364 Published 2008-07-02 No fix listed CWE-20

TI-2008-02842 CVE-2008-2968 · GHSA-mp3g-r67x-h2fg

SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and…

LOW 35

SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the book_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01137 Published 2008-07-02 No fix listed CWE-89

TI-2008-02752 CVE-2008-2878 · GHSA-5qjf-pqqq-p29w

Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1…

LOW 34

Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL i…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02786 Published 2008-06-26 No fix listed

TI-2008-02843 CVE-2008-2969 · GHSA-j2cv-j24w-c67w

Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA)…

LOW 28

Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02832 Published 2008-07-02 No fix listed CWE-22

TI-2008-02841 CVE-2008-2967 · GHSA-5m8g-mxhg-m5v5

Multiple cross-site scripting (XSS) vulnerabilities in Academic Web Tools (AWT YEKTA)…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) query string to login.php…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0173 Published 2008-07-02 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0