Vulnerabilities

TI-2008-01881 CVE-2008-1958 · GHSA-mpgc-w69p-hq4f

Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr…

LOW 35

Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr Script News 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with a .php extension.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03298 Published 2008-04-25 No fix listed CWE-94

TI-2008-01880 CVE-2008-1957 · GHSA-v69q-ww6r-wqm8

SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to…

LOW 35

SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands via the nb parameter in voir mode.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01188 Published 2008-04-25 No fix listed CWE-89

Vulnerabilities

Filters

Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr…

SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to…