Vulnerabilities

TI-2007-01651 CVE-2007-1715 · GHSA-433j-4xq7-69pg

PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and…

LOW 38

PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02486 Published 2007-03-27 No fix listed

TI-2006-05547 CVE-2006-5763 · GHSA-8r36-rp8c-gg5f

Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly…

LOW 31

Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP para…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.05115 Published 2006-11-06 No fix listed

TI-2006-05546 CVE-2006-5762 · GHSA-w4w5-8883-pgqr

PHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and…

LOW 33

PHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.06595 Published 2006-11-06 No fix listed CWE-94

TI-2006-05475 CVE-2006-5671 · GHSA-h22c-2f76-33qh

PHP remote file inclusion vulnerability in contact.php in Free Image Hosting 1.0 and…

LOW 35

PHP remote file inclusion vulnerability in contact.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01278 Published 2006-11-03 No fix listed

TI-2006-05474 CVE-2006-5670 · GHSA-rp2v-54m4-j9wm

PHP remote file inclusion vulnerability in forgot_pass.php in Free Image Hosting 1.0 and…

LOW 39

PHP remote file inclusion vulnerability in forgot_pass.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03188 Published 2006-11-03 No fix listed