Vulnerabilities

TI-2009-04439 CVE-2009-4683 · GHSA-58w3-rppv-8634

Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to…

LOW 37

Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter in a dovote action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02356 Published 2010-03-10 No fix listed CWE-22

TI-2009-04438 CVE-2009-4682 · GHSA-r33g-v22q-5gfw

Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01436 Published 2010-03-10 No fix listed CWE-79

Vulnerabilities

Filters

Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to…

Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote…