Vulnerabilities

TI-2010-02050 CVE-2010-2138 · GHSA-gr4w-3rcg-cq27

Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote…

LOW 37

Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the _SESSION[userLang] parameter to (1) el…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0407 Published 2010-06-02 No fix listed CWE-22

TI-2010-02049 CVE-2010-2137 · GHSA-3w5g-8rr6-f44g

PHP remote file inclusion vulnerability in _center.php in ProMan 0.1.1 and earlier allows…

MEDIUM 42

PHP remote file inclusion vulnerability in _center.php in ProMan 0.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05882 Published 2010-06-02 No fix listed CWE-94

Vulnerabilities

Filters

Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote…

PHP remote file inclusion vulnerability in _center.php in ProMan 0.1.1 and earlier allows…