Vulnerabilities

TI-2003-01305 CVE-2003-1405 · GHSA-3g7c-5v2x-h72w

DotBr 0.1 allows remote attackers to execute arbitrary shell commands via the cmd…

MEDIUM 40

DotBr 0.1 allows remote attackers to execute arbitrary shell commands via the cmd parameter to (1) exec.php3 or (2) system.php3.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03978 Published 2007-10-20 No fix listed CWE-20

TI-2003-01304 CVE-2003-1404 · GHSA-8rx9-vf5f-c3m8

DotBr 0.1 stores config.inc with insufficient access control under the web document root…

LOW 36

DotBr 0.1 stores config.inc with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information such as SQL usernames and passwords.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01359 Published 2007-10-20 No fix listed CWE-200

TI-2003-01303 CVE-2003-1403 · GHSA-cwr8-3mh6-89cx

foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a…

LOW 36

foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01477 Published 2007-10-20 No fix listed CWE-20

Vulnerabilities

Filters

DotBr 0.1 allows remote attackers to execute arbitrary shell commands via the cmd…

DotBr 0.1 stores config.inc with insufficient access control under the web document root…

foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a…