Vulnerabilities

TI-2007-02207 CVE-2007-2289 · GHSA-h2gj-j3wh-6965

PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insert_link.php in…

LOW 36

PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insert_link.php in download engine (Download-Engine) 1.4.1 allows remote authenticated users to execute arbitrary PHP code via a URL in the spaw_root…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01348 Published 2007-04-26 No fix listed

TI-2007-02173 CVE-2007-2255 · GHSA-5mhv-62mq-c5pf

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote…

LOW 36

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) eng_dir parameter to addmember.php, (2) lang_path parameter to admin/e…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01744 Published 2007-04-25 No fix listed

TI-2007-01715 CVE-2007-1791 · GHSA-vp43-58mq-7r78

SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote…

LOW 35

SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01061 Published 2007-03-31 No fix listed

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insert_link.php in…

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote…

SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote…