Vulnerabilities

TI-2008-01766 CVE-2008-1839 · GHSA-f93v-7p8q-wgrc

Multgiple cross-site scripting (XSS) vulnerabilities in module/main.php in WORK system…

LOW 22

Multgiple cross-site scripting (XSS) vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) day, (2) month, and (3) year parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2008-04-16 No fix listed CWE-79

TI-2007-05567 CVE-2007-5801 · GHSA-v4wq-rpgc-mqx3

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and…

LOW 35

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01164 Published 2007-11-03 No fix listed

TI-2007-01365 CVE-2007-1423 · GHSA-27rc-6r2c-mc56

Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and…

MEDIUM 47

Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the g_include parameter to include/include_top.php and cert…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04071 Published 2007-03-13 No fix listed

Vulnerabilities

Filters

Multgiple cross-site scripting (XSS) vulnerabilities in module/main.php in WORK system…

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and…

Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and…