Vulnerabilities

TI-2008-04966 CVE-2008-5215 · GHSA-r7vg-j876-586m

SQL injection vulnerability in service/profil.php in ClanLite 2.2006.05.20 allows remote…

LOW 35

SQL injection vulnerability in service/profil.php in ClanLite 2.2006.05.20 allows remote attackers to execute arbitrary SQL commands via the link parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-11-24 No fix listed CWE-89

TI-2008-04965 CVE-2008-5214 · GHSA-7cpc-h88m-6rhx

Cross-site scripting (XSS) vulnerability in service/calendrier.php in ClanLite…

LOW 23

Cross-site scripting (XSS) vulnerability in service/calendrier.php in ClanLite 2.2006.05.20 allows remote attackers to inject arbitrary web script or HTML via the annee parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01524 Published 2008-11-24 No fix listed CWE-79

TI-2007-04979 CVE-2007-5168 · GHSA-qxhm-5fg4-r976

Multiple PHP remote file inclusion vulnerabilities in ClanLite 1.23.01.2005 allow remote…

LOW 33

Multiple PHP remote file inclusion vulnerabilities in ClanLite 1.23.01.2005 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) modules/serveur_jeux.php or (2) conf/conf-php.p…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01324 Published 2007-10-01 No fix listed CWE-20

Vulnerabilities

Filters

SQL injection vulnerability in service/profil.php in ClanLite 2.2006.05.20 allows remote…

Cross-site scripting (XSS) vulnerability in service/calendrier.php in ClanLite…

Multiple PHP remote file inclusion vulnerabilities in ClanLite 1.23.01.2005 allow remote…