Vulnerabilities

TI-2008-03172 CVE-2008-3311 · GHSA-mc9c-24hr-w33v

PHP remote file inclusion vulnerability in config.php in Adam Scheinberg Flip 3.0 allows…

LOW 37

PHP remote file inclusion vulnerability in config.php in Adam Scheinberg Flip 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the incpath parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02349 Published 2008-07-25 No fix listed CWE-94

TI-2007-04880 CVE-2007-5063 · GHSA-gg9q-rhfx-24wv

Adam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with…

LOW 32

Adam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing login credentials via a direct request fo…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06243 Published 2007-09-24 No fix listed CWE-255

TI-2007-04879 CVE-2007-5062 · GHSA-xp9m-2qw6-h5vm

account.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create…

LOW 37

account.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create administrative accounts via the un parameter in a register action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02335 Published 2007-09-24 No fix listed CWE-264

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in config.php in Adam Scheinberg Flip 3.0 allows…

Adam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with…

account.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create…