Vulnerabilities

TI-2008-04375 CVE-2008-4590 · GHSA-c4qx-x23h-48j9

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to admin/login.php and (2) the post parameter to admin/news.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-10-16 No fix listed CWE-89

TI-2008-03915 CVE-2008-4081 · GHSA-w23j-m5qf-8f8w

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain…

LOW 38

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02561 Published 2008-09-15 No fix listed CWE-287

TI-2008-03914 CVE-2008-4080 · GHSA-mq5f-vwpq-7wpj

SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows…

LOW 36

SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the (1) username parameter to admin/library/authenticate.php and the (2) downlo…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03108 Published 2008-09-15 No fix listed CWE-89

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute…

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain…

SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows…