Vulnerabilities

TI-2008-04014 CVE-2008-4183 · GHSA-wpr7-r9cj-c64p

IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access…

LOW 29

IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup via a direct request to a backup/backup-yyyy-dd-mm.sql filename.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03233 Published 2008-09-23 No fix listed CWE-200

TI-2006-02890 CVE-2006-2985 · GHSA-5hfv-r9xg-387j

SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote…

LOW 35

SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded "'" characters in the STYLE_URL parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01299 Published 2006-06-13 No fix listed

TI-2006-02889 CVE-2006-2984 · GHSA-89qc-2xqx-h6cc

Cross-site scripting (XSS) vulnerability in index.php in IntegraMOD 1.4.0 and earlier…

LOW 24

Cross-site scripting (XSS) vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the STYLE_URL parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01789 Published 2006-06-13 No fix listed

Vulnerabilities

Filters

IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access…

SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote…

Cross-site scripting (XSS) vulnerability in index.php in IntegraMOD 1.4.0 and earlier…