Vulnerabilities

TI-2021-09944 CVE-2021-29054 · GHSA-4rrc-qjf7-pc45

Certain Papoo products are affected by: Cross Site Request Forgery (CSRF) in the admin…

LOW 39

Certain Papoo products are affected by: Cross Site Request Forgery (CSRF) in the admin interface.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00783 Published 2021-04-13 No fix listed CWE-352

TI-2009-00700 CVE-2009-0735 · GHSA-vhv4-mr2w-hc59

Directory traversal vulnerability in lib/classes/message_class.php in Papoo CMS 3.6, when…

LOW 27

Directory traversal vulnerability in lib/classes/message_class.php in Papoo CMS 3.6, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to read and possibly execute arbitrary files…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.02154 Published 2009-02-25 No fix listed CWE-22

TI-2008-03566 CVE-2008-3724 · GHSA-h4hw-9hxp-g377

SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via the suchanzahl parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01258 Published 2008-08-20 No fix listed CWE-89

TI-2007-03387 CVE-2007-3494 · GHSA-hw45-72c5-h6pw

Papoo CMS 3.6, and possibly earlier, does not verify user privileges when accessing the…

LOW 34

Papoo CMS 3.6, and possibly earlier, does not verify user privileges when accessing the backend administration plugins, which allows remote authenticated users to (1) read the entire database by accessing the database ba…

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.02052 Published 2007-06-29 No fix listed

TI-2007-03347 CVE-2007-3453 · GHSA-g74r-9q47-hwcj

SQL injection vulnerability in Papoo 3.6, and possibly earlier, allows remote attackers…

LOW 35

SQL injection vulnerability in Papoo 3.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the selmenuid parameter to certain components.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01258 Published 2007-06-27 No fix listed

TI-2007-02238 CVE-2007-2320 · GHSA-jh8j-hmrf-jm4h

SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote…

LOW 35

SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL commands via the menuid parameter, a different vector than CVE-2005-4478.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01195 Published 2007-04-26 No fix listed

TI-2006-03464 CVE-2006-3572 · GHSA-6qh8-fmx4-2qcf

SQL injection vulnerability in forumthread.php in Papoo 3 RC3 and earlier allows remote…

LOW 37

SQL injection vulnerability in forumthread.php in Papoo 3 RC3 and earlier allows remote attackers to execute arbitrary SQL commands via the msgid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02008 Published 2006-07-13 No fix listed

TI-2006-03463 CVE-2006-3571 · GHSA-79wx-gv54-97wp

Multiple cross-site scripting (XSS) vulnerabilities in interna/hilfe.php in Papoo 3 RC3…

LOW 18

Multiple cross-site scripting (XSS) vulnerabilities in interna/hilfe.php in Papoo 3 RC3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) titel or (2) ausgabe parameters.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02444 Published 2006-07-13 No fix listed CWE-79

TI-2006-01863 CVE-2006-1918 · GHSA-v2pv-q68m-hgqc

Multiple cross-site scripting (XSS) vulnerabilities in Papoo 2.1.5 allow remote attackers…

LOW 17

Multiple cross-site scripting (XSS) vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the menuid parameter to (1) index.php or (2) forum.php, or the (3) reporeid_print param…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01705 Published 2006-04-20 No fix listed CWE-79

TI-2006-01712 CVE-2006-1766 · GHSA-3h56-q4g9-c72w

Multiple SQL injection vulnerabilities in Papoo 2.1.5, and 3 beta1 and earlier, allow…

LOW 30

Multiple SQL injection vulnerabilities in Papoo 2.1.5, and 3 beta1 and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) getlang and (2) reporeid parameter in (a) index.php, (3) menuid paramet…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01007 Published 2006-04-13 No fix listed

TI-2006-00552 CVE-2006-0569 · GHSA-ww2c-73c5-r92j

Cross-site scripting (XSS) vulnerability in user_class.php in Papoo 2.1.4 and earlier…

LOW 22

Cross-site scripting (XSS) vulnerability in user_class.php in Papoo 2.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the username field during the registration of a new account.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2006-02-07 No fix listed

TI-2005-04221 CVE-2005-4478 · GHSA-86m8-rg37-85gx

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) menuid parameter to (a) index.php and (b) guestbook.php, and the (2) forumid and (3)…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01303 Published 2005-12-22 No fix listed CWE-89

Vulnerabilities

Filters