Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Telop01 Project Component: Telop01 Clear all filters
TI-2021-03950 CVE-2021-20724 · GHSA-p426-3xmr-fwmf

Cross-site scripting in PHP Factory [Telop01] free edition

Priority LOW 29

Reflected cross-site scripting vulnerability in the admin page of [Telop01] free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00773 Published 2021-05-24 No fix listed CWE-79
TI-2020-04585 CVE-2020-5616 · GHSA-73rh-fgwv-4hpw

Improper authentication in PHP Factory [Calendar01], [Calendar02], [PKOBO-News01]…

Priority MEDIUM 48

[Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free edition ver1.0.0, [Calendar02] free edition ver1.0.0, [PKOBO-News01] free edition ver1.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03064 Published 2020-08-04 No fix listed CWE-287