Vulnerabilities

TI-2002-01976 CVE-2002-2057 · GHSA-xvfv-x947-hhgf

TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/member_log.txt…

LOW 26

TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/member_log.txt, which is stored under the web document root with insufficient access control, which allows remote attackers to identify IP's visiting…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01649 Published 2005-07-14 No fix listed

TI-2002-01975 CVE-2002-2056 · GHSA-f828-3wmc-hg2m

Cross-site scripting (XSS) vulnerability in TeeKai Forum 1.2 allows remote attackers to…

LOW 22

Cross-site scripting (XSS) vulnerability in TeeKai Forum 1.2 allows remote attackers to inject arbitrary web script or HTML via the valid_username_online cookie.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00938 Published 2005-07-14 No fix listed

TI-2002-01973 CVE-2002-2054 · GHSA-m92w-gg3f-9w3h

TeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and…

LOW 36

TeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and gain privileged web forum access by setting the valid_level cookie to admin.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01727 Published 2005-07-14 No fix listed

Vulnerabilities

Filters

TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/member_log.txt…

Cross-site scripting (XSS) vulnerability in TeeKai Forum 1.2 allows remote attackers to…

TeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and…