Vulnerabilities

TI-2008-06564 CVE-2008-6876 · GHSA-m66f-8ffw-m34x

Cross-site scripting (XSS) vulnerability in login.php in EsPartenaires 1.0 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in login.php in EsPartenaires 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01107 Published 2009-07-24 No fix listed CWE-79

TI-2009-02466 CVE-2009-2581 · GHSA-mgm3-5x33-7mw3

Cross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNews 1.2…

LOW 22

Cross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNews 1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00893 Published 2009-07-23 No fix listed CWE-79

TI-2008-06556 CVE-2008-6868 · GHSA-g3v5-x7p8-gp6p

Cross-site scripting (XSS) vulnerability in default/login.php in EditeurScripts…

LOW 22

Cross-site scripting (XSS) vulnerability in default/login.php in EditeurScripts EsBaseAdmin 2.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01107 Published 2009-07-23 No fix listed CWE-79

TI-2008-05712 CVE-2008-6016 · GHSA-36mq-h5r6-m2x4

SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to…

LOW 35

SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3952.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00905 Published 2009-01-30 No fix listed CWE-89

TI-2008-05711 CVE-2008-6015 · GHSA-94f2-wq7j-xw67

Multiple SQL injection vulnerabilities in search.php in EsFaq 2.0 allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in search.php in EsFaq 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) keywords and (2) cat parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01001 Published 2009-01-30 No fix listed CWE-89

TI-2008-01958 CVE-2008-2037 · GHSA-5345-r64x-6gw6

Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0…

LOW 20

Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0 allow remote authenticated users to inject arbitrary web script or HTML via the msg parameter to (1) login.php, (2) importer.php, (3) a…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0145 Published 2008-04-30 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in login.php in EsPartenaires 1.0 allows remote…

Cross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNews 1.2…

Cross-site scripting (XSS) vulnerability in default/login.php in EditeurScripts…

SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to…

Multiple SQL injection vulnerabilities in search.php in EsFaq 2.0 allow remote attackers…

Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0…