Vulnerabilities

TI-2009-03262 CVE-2009-3423 · GHSA-hf35-fq38-46hh

login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers…

LOW 35

login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02569 Published 2009-09-25 No fix listed CWE-287

TI-2009-03162 CVE-2009-3320 · GHSA-fhmg-6ffp-g88h

Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link)…

LOW 23

Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01484 Published 2009-09-23 No fix listed CWE-79

Vulnerabilities

Filters

login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers…

Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link)…