Vulnerabilities

TI-2008-06096 CVE-2008-6404 · GHSA-88jg-q7mg-p9cp

Cross-site scripting (XSS) vulnerability in add_calendars.php in eXtrovert Software Thyme…

LOW 23

Cross-site scripting (XSS) vulnerability in add_calendars.php in eXtrovert Software Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the callback parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01449 Published 2009-03-06 No fix listed CWE-79

TI-2009-00515 CVE-2009-0535 · GHSA-7jv8-gg36-9gq4

Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when…

LOW 37

Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals is disabled, allows remote attackers to read arbitrary files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0232 Published 2009-02-11 No fix listed CWE-22

TI-2006-02062 CVE-2006-2117 · GHSA-mm4g-qrpv-xjp8

Cross-site scripting (XSS) vulnerability in Thyme 1.3 allows remote attackers to inject…

LOW 23

Cross-site scripting (XSS) vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01434 Published 2006-05-01 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in add_calendars.php in eXtrovert Software Thyme…

Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when…

Cross-site scripting (XSS) vulnerability in Thyme 1.3 allows remote attackers to inject…