Vulnerabilities

TI-2011-03318 CVE-2011-3761 · GHSA-vphg-5gw5-pp95

NuSOAP 0.9.5 allows remote attackers to obtain sensitive information via a direct request…

LOW 26

NuSOAP 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by nuSOAP/classes/class.wsdl.php and cert…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01581 Published 2011-09-24 No fix listed CWE-200

TI-2010-02933 CVE-2010-3070 · GHSA-fg9p-q5pm-9gpr

Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other…

LOW 29

Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to an arbitrary PHP script that uses NuSO…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06161 Published 2010-09-28 No fix listed CWE-79

Vulnerabilities

Filters

NuSOAP 0.9.5 allows remote attackers to obtain sensitive information via a direct request…

Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other…