Vulnerabilities

TI-2008-00366 CVE-2008-0391 · GHSA-g229-jwh8-gqpv

inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows…

LOW 37

inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an arbitrary user account via a modified lilil parameter, in conjunction with the ubild and pa parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02252 Published 2008-01-23 No fix listed CWE-287

TI-2008-00346 CVE-2008-0371 · GHSA-jf6m-7p72-cmww

Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is…

LOW 32

Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via (1) the mohit parameter to (a) inc/receivertwo.php; and…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0111 Published 2008-01-22 No fix listed CWE-89

Vulnerabilities

Filters

inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows…

Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is…