Vulnerabilities

TI-2006-04203 CVE-2006-4351 · GHSA-m7m4-6jh4-8g8f

Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote…

LOW 32

Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01151 Published 2006-08-24 No fix listed

TI-2006-04202 CVE-2006-4350 · GHSA-5rm3-pf82-q5pw

SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01201 Published 2006-08-24 No fix listed

TI-2006-01454 CVE-2006-1501 · GHSA-g78c-76jc-9gfq

SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in the kans action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01251 Published 2006-03-30 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote…

SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to…

SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to…