Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Firefly Clear all filters
TI-2007-05591 CVE-2007-5825 · GHSA-x57w-969p-qrv9

Format string vulnerability in the ws_addarg function in webserver.c in mt-dappd in…

Priority LOW 39

Format string vulnerability in the ws_addarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to execute arbitrary code via a stats method action to /xml-rpc with form…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03723 Published 2007-11-05 No fix listed CWE-134
TI-2007-05590 CVE-2007-5824 · GHSA-33cc-8pcc-ph75

webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers…

Priority MEDIUM 40

webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a stats method action to /xml-rpc with (1) an empty Authoriza…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.05592 Published 2007-11-05 No fix listed CWE-20
TI-2007-02372 CVE-2007-2456 · GHSA-7mph-9r86-93q7

Multiple PHP remote file inclusion vulnerabilities in FireFly 1.1.01 allow remote…

Priority MEDIUM 45

Multiple PHP remote file inclusion vulnerabilities in FireFly 1.1.01 allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to (1) localize.php or (2) config.php in modules/admin/include…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09462 Published 2007-05-02 No fix listed