Vulnerabilities

TI-2008-00680 CVE-2008-0714 · GHSA-rpvq-484q-f5wg

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers…

LOW 32

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lost_password_go action.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00949 Published 2008-02-12 No fix listed CWE-89

TI-2007-06353 CVE-2007-6657 · GHSA-q4m3-6ww5-pqp6

PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism…

MEDIUM 42

PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfh_root_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06028 Published 2008-01-04 No fix listed CWE-94

TI-2007-06349 CVE-2007-6653 · GHSA-cg49-hwxp-pxwc

Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows…

LOW 27

Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02263 Published 2008-01-04 No fix listed CWE-22

Vulnerabilities

Filters

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers…

PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism…

Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows…