Vulnerabilities

TI-2014-08165 CVE-2014-10003 · GHSA-x7p2-x82x-6693

Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the width parameter to (1) uploader/admin/js/load_flv.js.php or (2) uploader/js/…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01854 Published 2015-01-13 No fix listed CWE-79

TI-2008-03182 CVE-2008-3321 · GHSA-mrmm-m7c9-vvmg

admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass…

MEDIUM 43

admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary uploader_cookie cookie.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07771 Published 2008-07-25 No fix listed CWE-287

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote…

admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass…