Vulnerabilities

TI-2013-02310 CVE-2013-2624 · GHSA-wf75-573p-gj9h

Telean before 1.3.1 contains a full path disclosure vulnerability which could allow…

LOW 33

Telean before 1.3.1 contains a full path disclosure vulnerability which could allow remote attackers to obtain sensitive information through a specially crafted URL request.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.06492 Published 2020-02-03 No fix listed CWE-200

TI-2013-02309 CVE-2013-2623 · GHSA-x3v7-5mr9-w7gg

Cross-site Scripting (XSS) in Telaen before 1.3.1 allows remote attackers to inject…

LOW 32

Cross-site Scripting (XSS) in Telaen before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the "f_email" parameter in index.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02834 Published 2020-02-03 No fix listed CWE-79

TI-2013-02307 CVE-2013-2621 · GHSA-gmw9-g2ff-gv7j

Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows…

MEDIUM 40

Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websites via a crafted URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.10692 Published 2020-02-03 No fix listed CWE-601

Vulnerabilities

Filters

Telean before 1.3.1 contains a full path disclosure vulnerability which could allow…

Cross-site Scripting (XSS) in Telaen before 1.3.1 allows remote attackers to inject…

Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows…