Vulnerabilities

TI-2011-03294 CVE-2011-3737 · GHSA-qv8r-v52g-jc53

eyeOS 2.2.0.0 allows remote attackers to obtain sensitive information via a direct…

LOW 26

eyeOS 2.2.0.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by apps/rmail/webmail/program/lib/Net/SM…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200

TI-2006-06301 CVE-2006-6556 · GHSA-c8x4-v94c-x2h5

The eyeHome function in apps/eyeHome.eyeapp/aplic.php in EyeOS before 0.9.3-3 allows…

LOW 38

The eyeHome function in apps/eyeHome.eyeapp/aplic.php in EyeOS before 0.9.3-3 allows remote attackers to upload and execute arbitrary code via dangerous file extensions that are not all lowercase, which bypasses a cleans…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03045 Published 2006-12-14 No fix listed

Vulnerabilities

Filters

eyeOS 2.2.0.0 allows remote attackers to obtain sensitive information via a direct…

The eyeHome function in apps/eyeHome.eyeapp/aplic.php in EyeOS before 0.9.3-3 allows…