Vulnerabilities

TI-2020-16658 CVE-2020-27406 · GHSA-hp3f-7693-2xp7

Cross Site Scripting (XSS) vulnerability in DynPG 4.9.1, allows authenticated attackers…

LOW 26

Cross Site Scripting (XSS) vulnerability in DynPG 4.9.1, allows authenticated attackers to execute arbitrary code via the groupname.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00764 Published 2021-11-02 No fix listed CWE-79

TI-2021-09003 CVE-2021-27526 · GHSA-mcvj-9rv7-4xfh

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers…

LOW 23

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "page" parameter.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00786 Published 2021-03-23 No fix listed CWE-79

TI-2021-09004 CVE-2021-27527 · GHSA-p324-2cr9-26cx

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers…

LOW 23

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "valueID" parameter.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00786 Published 2021-03-23 No fix listed CWE-79

TI-2021-09007 CVE-2021-27530 · GHSA-w75w-hh66-96g4

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allow remote attacker…

LOW 23

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allow remote attacker to inject javascript via URI in /index.php.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00786 Published 2021-03-23 No fix listed CWE-79

TI-2021-09005 CVE-2021-27528 · GHSA-qrv7-39mw-29rc

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers…

LOW 23

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "refID" parameter.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00786 Published 2021-03-23 No fix listed CWE-79

TI-2021-09008 CVE-2021-27531 · GHSA-5vgw-w88p-vqgq

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers…

LOW 24

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "query" parameter.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0083 Published 2021-03-23 No fix listed CWE-79

TI-2021-09006 CVE-2021-27529 · GHSA-p7j2-fgrc-8c2j

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers…

LOW 23

A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "limit" parameter.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00786 Published 2021-03-23 No fix listed CWE-79

TI-2010-04134 CVE-2010-4401 · GHSA-j88x-c8h7-p6q6

languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive…

LOW 31

languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05504 Published 2010-12-04 No fix listed CWE-200

TI-2010-04133 CVE-2010-4400 · GHSA-jphr-2mj7-594v

SQL injection vulnerability in _rights.php in DynPG CMS 4.2.0 allows remote attackers to…

LOW 37

SQL injection vulnerability in _rights.php in DynPG CMS 4.2.0 allows remote attackers to execute arbitrary SQL commands via the giveRights_UserId parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02156 Published 2010-12-04 No fix listed CWE-89

TI-2010-04132 CVE-2010-4399 · GHSA-jqf8-922f-52g9

Directory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when…

LOW 29

Directory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0556 Published 2010-12-04 No fix listed CWE-22

TI-2010-01254 CVE-2010-1299 · GHSA-96g8-m388-4q2w

Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly…

LOW 36

Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a U…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.1073 Published 2010-04-07 No fix listed CWE-94

Vulnerabilities

Filters