Vulnerabilities

TI-2011-03291 CVE-2011-3734 · GHSA-xx7w-8884-5pcq

Energine 2.3.8 allows remote attackers to obtain sensitive information via a direct…

LOW 26

Energine 2.3.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by core/framework/SimpleBuilder.class.p…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200

TI-2010-03939 CVE-2010-4185 · GHSA-qfh4-2jgc-5v7g

SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows…

LOW 35

SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the NRGNSID cookie.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2010-11-05 No fix listed CWE-89

Vulnerabilities

Filters

Energine 2.3.8 allows remote attackers to obtain sensitive information via a direct…

SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows…