Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Apache2triad Clear all filters
TI-2017-09614 CVE-2017-12970 · GHSA-cg76-v6hw-6p7j

Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote…

Priority MEDIUM 42

Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated users for requests that (1) add or (2) delete user accounts via a request to php…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02217 Published 2017-08-23 No fix listed CWE-352
TI-2006-00137 CVE-2006-0144 · GHSA-j5qr-fr9w-5pj5

The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad…

Priority LOW 36

The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that provides a modified ve…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01827 Published 2006-01-09 No fix listed CWE-94