Vulnerabilities

TI-2008-01304 CVE-2008-1355 · GHSA-qccj-3w98-9f7v

Cross-site scripting (XSS) vulnerability in index.php in Jeebles Technology Jeebles…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in Jeebles Technology Jeebles Directory 2.9.60 allows remote attackers to inject arbitrary web script or HTML via the path parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01449 Published 2008-03-17 No fix listed CWE-79

TI-2007-05479 CVE-2007-5706 · GHSA-7xqc-5x2g-6vmp

Absolute path traversal vulnerability in download.php in Jeebles Directory 2.9.60 allows…

MEDIUM 45

Absolute path traversal vulnerability in download.php in Jeebles Directory 2.9.60 allows remote attackers to read arbitrary files via a full pathname in the query string.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02666 Published 2007-10-29 No fix listed CWE-22

TI-2007-05478 CVE-2007-5705 · GHSA-9xwq-p786-gg42

Unspecified vulnerability in the Settings component in the administration system in…

LOW 28

Unspecified vulnerability in the Settings component in the administration system in Jeebles Directory 2.9.60 allows remote authenticated administrators to execute arbitrary PHP code via unspecified vectors related to set…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00857 Published 2007-10-29 No fix listed CWE-94

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in index.php in Jeebles Technology Jeebles…

Absolute path traversal vulnerability in download.php in Jeebles Directory 2.9.60 allows…

Unspecified vulnerability in the Settings component in the administration system in…