Vulnerabilities

TI-2008-02132 CVE-2008-2220 · GHSA-wcw8-8mgm-r3h5

Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community…

LOW 34

Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) CO…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01975 Published 2008-05-14 No fix listed CWE-94

TI-2007-04044 CVE-2007-4177 · GHSA-fvpx-c9g3-8m4p

Multiple cross-site scripting (XSS) vulnerabilities in Interact before 2.4 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Interact before 2.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2007-08-08 No fix listed

TI-2007-03223 CVE-2007-3328 · GHSA-7g5m-8x27-79gh

Multiple cross-site scripting (XSS) vulnerabilities in Interact 2.4 beta 1 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) module_key parameter to (a) kb/kb.php, (b) quiz/runquiz.php, (c) quiz/q…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02295 Published 2007-06-21 No fix listed

TI-2006-01591 CVE-2006-1644 · GHSA-7j3q-gx7v-9pjc

login.php in Interact 2.1.1 generates different responses depending on whether or not a…

LOW 26

login.php in Interact 2.1.1 generates different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01388 Published 2006-04-06 No fix listed

TI-2006-01590 CVE-2006-1643 · GHSA-vv8m-h7c7-qcr5

SQL injection vulnerability in login.php in Interact 2.1.1 allows remote attackers to…

LOW 35

SQL injection vulnerability in login.php in Interact 2.1.1 allows remote attackers to execute arbitrary SQL commands via the user_name parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2006-04-06 No fix listed

TI-2006-01589 CVE-2006-1642 · GHSA-vfg9-mm4r-c5qq

Cross-site scripting (XSS) vulnerability in Interact 2.1.1 allows remote attackers to…

LOW 16

Cross-site scripting (XSS) vulnerability in Interact 2.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) the search_terms parameter to (a) search.php, and (2) the first_name, (3) last_name, (4) e…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01171 Published 2006-04-06 No fix listed