Vulnerabilities

TI-2008-06453 CVE-2008-6764 · GHSA-3cr6-mg6c-353g

Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01497 Published 2009-04-28 No fix listed CWE-79

TI-2008-06452 CVE-2008-6763 · GHSA-473v-w8hj-5r3p

login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication…

MEDIUM 42

login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary account by setting the logged_in cookie to that account's username.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06523 Published 2009-04-28 No fix listed CWE-287

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows…

login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication…