Vulnerabilities

TI-2009-01942 CVE-2009-2034 · GHSA-cv5p-mx2f-hjcv

SQL injection vulnerability in writemessage.php in Yogurt 0.3, when register_globals is…

LOW 28

SQL injection vulnerability in writemessage.php in Yogurt 0.3, when register_globals is enabled, allows remote authenticated users to execute arbitrary SQL commands via the original parameter.

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00817 Published 2009-06-12 No fix listed CWE-89

TI-2009-01941 CVE-2009-2033 · GHSA-x52q-7f5g-8m6f

Cross-site scripting (XSS) vulnerability in index.php in Yogurt 0.3 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01475 Published 2009-06-12 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in writemessage.php in Yogurt 0.3, when register_globals is…

Cross-site scripting (XSS) vulnerability in index.php in Yogurt 0.3 allows remote…