Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Maniacomputer Component: Mcshoutbox Clear all filters
TI-2009-03540 CVE-2009-3716 · GHSA-5jj7-6jx2-x56m

Unrestricted file upload vulnerability in admin.php in MCshoutbox 1.1 allows remote…

Priority LOW 35

Unrestricted file upload vulnerability in admin.php in MCshoutbox 1.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request t…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0357 Published 2009-10-16 No fix listed CWE-264
TI-2009-03539 CVE-2009-3715 · GHSA-rp39-cm7q-xq66

Multiple SQL injection vulnerabilities in scr_login.php in MCshoutbox 1.1, when…

Priority LOW 34

Multiple SQL injection vulnerabilities in scr_login.php in MCshoutbox 1.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0198 Published 2009-10-16 No fix listed CWE-89