Vulnerabilities

TI-2007-01206 CVE-2007-1243 · GHSA-h24j-75v5-6p2q

Audins Audiens 3.3 allows remote attackers to bypass authentication and perform certain…

LOW 38

Audins Audiens 3.3 allows remote attackers to bypass authentication and perform certain privileged actions, possibly an uninstall of the product, by calling unistall.php with the values cnf=disinstalla and status=on.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.026 Published 2007-03-03 No fix listed

TI-2007-01205 CVE-2007-1242 · GHSA-5mrw-645j-x2vj

SQL injection vulnerability in system/index.php in Audins Audiens 3.3 allows remote…

LOW 35

SQL injection vulnerability in system/index.php in Audins Audiens 3.3 allows remote attackers to execute arbitrary SQL commands via the PHPSESSID cookie.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01033 Published 2007-03-03 No fix listed

TI-2007-01204 CVE-2007-1241 · GHSA-293j-h7h4-4rp5

Cross-site scripting (XSS) vulnerability in setup.php in Audins Audiens 3.3 allows remote…

LOW 29

Cross-site scripting (XSS) vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01631 Published 2007-03-03 No fix listed

Vulnerabilities

Filters

Audins Audiens 3.3 allows remote attackers to bypass authentication and perform certain…

SQL injection vulnerability in system/index.php in Audins Audiens 3.3 allows remote…

Cross-site scripting (XSS) vulnerability in setup.php in Audins Audiens 3.3 allows remote…