Vulnerabilities

TI-2007-03354 CVE-2007-3460 · GHSA-gpqw-m5q2-44j5

Multiple PHP remote file inclusion vulnerabilities in index.php3 in EVA-Web 1.1 through…

LOW 39

Multiple PHP remote file inclusion vulnerabilities in index.php3 in EVA-Web 1.1 through 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) aide or (2) perso parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03279 Published 2007-06-27 No fix listed

TI-2006-02598 CVE-2006-2690 · GHSA-6pq7-75w3-q5wf

An unspecified script in EVA-Web 2.1.2 and earlier, probably index.php, allows remote…

LOW 37

An unspecified script in EVA-Web 2.1.2 and earlier, probably index.php, allows remote attackers to obtain the full path of the web server via invalid (1) perso or (2) aide parameters.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01496 Published 2006-05-31 No fix listed

TI-2006-02597 CVE-2006-2689 · GHSA-c3m5-c3x3-85hv

Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) debut_image parameter in (a) article-album.php3, (2) date paramet…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01989 Published 2006-05-31 No fix listed

Vulnerabilities

Filters

Multiple PHP remote file inclusion vulnerabilities in index.php3 in EVA-Web 1.1 through…

An unspecified script in EVA-Web 2.1.2 and earlier, probably index.php, allows remote…

Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow…