Vulnerabilities

TI-2007-04035 CVE-2007-4167 · GHSA-7h3m-f66x-j7cc

PHP remote file inclusion vulnerability in cat_viewed.php in AL-Caricatier 2.5 allows…

LOW 36

PHP remote file inclusion vulnerability in cat_viewed.php in AL-Caricatier 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the CatName parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01362 Published 2007-08-07 No fix listed

TI-2006-01506 CVE-2006-1556 · GHSA-9vr6-p64m-w7rx

Multiple cross-site scripting (XSS) vulnerabilities in view_caricatier.php in…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in view_caricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) CatName, (2) CaricatierID, or (3) CatID parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02 Published 2006-03-31 No fix listed

TI-2005-04383 CVE-2005-4653 · GHSA-7wcr-cqmg-4vmr

Unspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote…

LOW 26

Unspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote attackers to bypass login authentication by requesting view_caricatier.php, and then requesting any file in the admin directory with a co…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01677 Published 2006-01-16 No fix listed

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in cat_viewed.php in AL-Caricatier 2.5 allows…

Multiple cross-site scripting (XSS) vulnerabilities in view_caricatier.php in…

Unspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote…