Vulnerabilities

TI-2006-02654 CVE-2006-2746 · GHSA-p3v3-gr5g-j32c

Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and…

LOW 36

Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in index.php, and the (2) mytheme a…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03088 Published 2006-06-01 No fix listed

TI-2006-02653 CVE-2006-2745 · GHSA-6qcj-5ppw-95gf

Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and…

LOW 33

Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) pathfile paramet…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.06796 Published 2006-06-01 No fix listed

TI-2006-02652 CVE-2006-2744 · GHSA-hw4q-6vwf-8v66

PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web…

MEDIUM 45

PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09861 Published 2006-06-01 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and…

Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and…

PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web…