Vulnerabilities

TI-2007-03855 CVE-2007-3978 · GHSA-f34f-q8xr-m883

Session fixation vulnerability in bwired allows remote attackers to hijack web sessions…

LOW 24

Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02016 Published 2007-07-25 No fix listed CWE-255

TI-2007-03854 CVE-2007-3977 · GHSA-m6cg-292h-c82c

LOW 23

Cross-site scripting (XSS) vulnerability in bwired allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01273 Published 2007-07-25 No fix listed CWE-79

TI-2007-03853 CVE-2007-3976 · GHSA-978x-vf2g-q5gr

LOW 35

SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the newsID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01029 Published 2007-07-25 No fix listed