Vulnerabilities

TI-2007-02472 CVE-2007-2560 · GHSA-73rr-42r7-rv3h

Directory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows…

LOW 28

Directory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02735 Published 2007-05-09 No fix listed

TI-2007-00681 CVE-2007-0698 · GHSA-cf5j-gxvf-7547

Multiple SQL injection vulnerabilities in ACGVannu 1.3 and earlier allow remote attackers…

LOW 32

Multiple SQL injection vulnerabilities in ACGVannu 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the id_mod parameter to templates/modif.html, and other unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01079 Published 2007-02-03 No fix listed

TI-2007-00680 CVE-2007-0697 · GHSA-pgcq-55gj-r266

index2.php in ACGVannu 1.3 and earlier allows remote attackers to change the password or…

LOW 34

index2.php in ACGVannu 1.3 and earlier allows remote attackers to change the password or profile of a user via a modified id parameter, related to templates/modif.html.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02888 Published 2007-02-03 No fix listed

Vulnerabilities

Filters

Directory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows…

Multiple SQL injection vulnerabilities in ACGVannu 1.3 and earlier allow remote attackers…

index2.php in ACGVannu 1.3 and earlier allows remote attackers to change the password or…