Vulnerabilities

TI-2006-01505 CVE-2006-1555 · GHSA-qjmm-xqq2-c7fr

VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access…

LOW 37

VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected articles by setting the vsns[topic_id] cookie to the targeted topic.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01908 Published 2006-03-31 No fix listed

TI-2006-01504 CVE-2006-1554 · GHSA-g232-j2gv-qh4c

Cross-site scripting (XSS) vulnerability in VSNS Lemon 3.2.0 allows remote attackers to…

LOW 16

Cross-site scripting (XSS) vulnerability in VSNS Lemon 3.2.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter while adding a comment.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01367 Published 2006-03-31 No fix listed

TI-2006-01503 CVE-2006-1553 · GHSA-cx4v-mc2w-9w3r

SQL injection vulnerability in functions/final_functions.php in VSNS Lemon 3.2.0, with…

LOW 26

SQL injection vulnerability in functions/final_functions.php in VSNS Lemon 3.2.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.01271 Published 2006-03-31 No fix listed

Vulnerabilities

Filters

VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access…

Cross-site scripting (XSS) vulnerability in VSNS Lemon 3.2.0 allows remote attackers to…

SQL injection vulnerability in functions/final_functions.php in VSNS Lemon 3.2.0, with…