Vulnerabilities

TI-2007-06173 CVE-2007-6476 · GHSA-7x7x-7xx6-jwmc

GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct…

LOW 28

GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct request to explorer/phpinfo.php, which calls the phpinfo function.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02674 Published 2007-12-20 No fix listed CWE-200

TI-2007-06172 CVE-2007-6475 · GHSA-px75-cvx6-hf5m

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to…

LOW 33

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02366 Published 2007-12-20 No fix listed CWE-22

TI-2007-06171 CVE-2007-6474 · GHSA-64qm-j9m9-wp2f

Multiple cross-site scripting (XSS) vulnerabilities in GF-3XPLORER 2.4 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to inject arbitrary web script or HTML via the newdir parameter to index_3x.php, and unspecified other vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01525 Published 2007-12-20 No fix listed CWE-79

Vulnerabilities

Filters

GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct…

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to…

Multiple cross-site scripting (XSS) vulnerabilities in GF-3XPLORER 2.4 allow remote…