Vulnerabilities

TI-2010-02790 CVE-2010-2917 · GHSA-7w2g-gjg9-qhmc

Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) emailid, (2) fname, (3) lname, (4) company, (5) addre…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0172 Published 2010-07-30 No fix listed CWE-79

TI-2008-06739 CVE-2008-7051 · GHSA-jgqv-rg38-f3m6

AJ Square AJ Article allows remote attackers to bypass authentication and access…

LOW 38

AJ Square AJ Article allows remote attackers to bypass authentication and access administrator functionality via a direct request to (1) user.php, (2) articles.php, (3) articlesuspend.php, (4) site.php, (5) statistics.ph…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02511 Published 2009-08-24 No fix listed CWE-287

TI-2008-06410 CVE-2008-6721 · GHSA-c463-p525-7qrq

SQL injection vulnerability in index.php in AJ Square AJ Article allows remote attackers…

LOW 35

SQL injection vulnerability in index.php in AJ Square AJ Article allows remote attackers to execute arbitrary SQL commands via the txtName parameter (aka the username field).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2009-04-14 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article…

AJ Square AJ Article allows remote attackers to bypass authentication and access…

SQL injection vulnerability in index.php in AJ Square AJ Article allows remote attackers…