Vulnerabilities

TI-2012-04037 CVE-2012-4744 · GHSA-pqch-95pp-rxjm

Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5…

LOW 22

Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01161 Published 2012-08-31 No fix listed CWE-79

TI-2012-04036 CVE-2012-4743 · GHSA-x39f-9gvv-9gr5

Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for…

LOW 35

Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the (1) ss, (2) sm, (3) align, or (4) category parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01309 Published 2012-08-31 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5…

Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for…