Vulnerabilities

TI-2007-00567 CVE-2007-0580 · GHSA-8rrm-rh4x-rxwg

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote…

LOW 35

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP code via a URL in the sesion_idioma parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0283 Published 2007-01-30 No fix listed

TI-2006-00152 CVE-2006-0159 · GHSA-3wmw-g879-9gp5

SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to…

LOW 35

SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2006-01-10 No fix listed CWE-89

TI-2006-00103 CVE-2006-0110 · GHSA-5832-2rfw-rmgg

Cross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the email parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01976 Published 2006-01-07 No fix listed

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote…

SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to…

Cross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote…