Vulnerabilities

TI-2006-06678 CVE-2006-6935 · GHSA-5665-mfgq-wp96

SQL injection vulnerability in the login component in Portix-PHP 0.4.2 allows remote…

LOW 35

SQL injection vulnerability in the login component in Portix-PHP 0.4.2 allows remote attackers to execute arbitrary SQL commands via the username and passwd (password) fields.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01161 Published 2007-01-16 No fix listed

TI-2006-06677 CVE-2006-6934 · GHSA-4c75-9mvv-68jv

Multiple cross-site scripting (XSS) vulnerabilities in Portix-PHP 0.4.2 allow remote…

LOW 33

Multiple cross-site scripting (XSS) vulnerabilities in Portix-PHP 0.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) titre or (2) auteur field in a forum post.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0141 Published 2007-01-16 No fix listed

TI-2002-02003 CVE-2002-2084 · GHSA-vr2j-fqvg-25gx

Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers…

LOW 34

Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08108 Published 2005-07-14 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in the login component in Portix-PHP 0.4.2 allows remote…

Multiple cross-site scripting (XSS) vulnerabilities in Portix-PHP 0.4.2 allow remote…

Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers…