Vulnerabilities

TI-2007-02538 CVE-2007-2626 · GHSA-94m6-hwpc-3696

SQL injection vulnerability in admin.php in SchoolBoard allows remote attackers to…

LOW 35

SQL injection vulnerability in admin.php in SchoolBoard allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01091 Published 2007-05-11 No fix listed

TI-2007-01651 CVE-2007-1715 · GHSA-433j-4xq7-69pg

PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and…

LOW 38

PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02486 Published 2007-03-27 No fix listed

TI-2006-05548 CVE-2006-5764 · GHSA-jwxj-42qx-9cvv

PHP remote file inclusion vulnerability in contact.php in Free File Hosting 1.1 and…

LOW 38

PHP remote file inclusion vulnerability in contact.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02735 Published 2006-11-06 No fix listed CWE-94

TI-2006-05547 CVE-2006-5763 · GHSA-8r36-rp8c-gg5f

Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly…

LOW 31

Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP para…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.05115 Published 2006-11-06 No fix listed

TI-2006-05546 CVE-2006-5762 · GHSA-w4w5-8883-pgqr

PHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and…

LOW 33

PHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.06595 Published 2006-11-06 No fix listed CWE-94

TI-2006-05475 CVE-2006-5671 · GHSA-h22c-2f76-33qh

PHP remote file inclusion vulnerability in contact.php in Free Image Hosting 1.0 and…

LOW 35

PHP remote file inclusion vulnerability in contact.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01278 Published 2006-11-03 No fix listed

TI-2006-05474 CVE-2006-5670 · GHSA-rp2v-54m4-j9wm

PHP remote file inclusion vulnerability in forgot_pass.php in Free Image Hosting 1.0 and…

LOW 39

PHP remote file inclusion vulnerability in forgot_pass.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03188 Published 2006-11-03 No fix listed