Vulnerabilities

TI-2009-01849 CVE-2009-1941 · GHSA-x736-3gm2-79w7

PAD Site Scripts 3.6 stores sensitive information under the web document root with…

LOW 27

PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02286 Published 2009-06-05 No fix listed CWE-264

TI-2009-01654 CVE-2009-1739 · GHSA-69j6-v7gp-q52w

PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges…

LOW 38

PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges as other users, including administrative privileges, by setting the authuser cookie parameter to a valid username.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02773 Published 2009-05-20 No fix listed CWE-20

Vulnerabilities

Filters

PAD Site Scripts 3.6 stores sensitive information under the web document root with…

PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges…