Vulnerabilities

TI-2008-03707 CVE-2008-3868 · GHSA-v3jm-pj4w-7m4c

Cross-site request forgery (CSRF) vulnerability in Interact 2.4.1 allows remote attackers…

LOW 31

Cross-site request forgery (CSRF) vulnerability in Interact 2.4.1 allows remote attackers to hijack the authentication of super administrators for requests that create super administrator accounts.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00599 Published 2008-11-03 No fix listed CWE-352

TI-2008-03706 CVE-2008-3867 · GHSA-8254-vfjx-phm7

SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote…

LOW 33

SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote attackers to execute arbitrary SQL commands via the email_user_key parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01221 Published 2008-11-03 No fix listed CWE-89

TI-2008-03245 CVE-2008-3384 · GHSA-69vv-64jh-mh3m

Multiple directory traversal vulnerabilities in help/help.php in Interact Learning…

LOW 39

Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1 allow remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03158 Published 2008-07-30 No fix listed CWE-22

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in Interact 2.4.1 allows remote attackers…

SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote…

Multiple directory traversal vulnerabilities in help/help.php in Interact Learning…