Vulnerabilities

TI-2009-04474 CVE-2009-4718 · GHSA-343v-vpw9-hxqj

SQL injection vulnerability in visitorduration.php in Gonafish WebStatCaffe allows remote…

LOW 35

SQL injection vulnerability in visitorduration.php in Gonafish WebStatCaffe allows remote attackers to execute arbitrary SQL commands via the nodayshow parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01013 Published 2010-03-15 No fix listed CWE-89

TI-2009-04473 CVE-2009-4717 · GHSA-6qx4-v2c7-9rhp

Multiple cross-site scripting (XSS) vulnerabilities in Gonafish WebStatCaffe allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Gonafish WebStatCaffe allow remote attackers to inject arbitrary web script or HTML via the (1) host parameter to stat/host.php, nodayshow parameter to (2) mostvisit…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01292 Published 2010-03-15 No fix listed CWE-79

TI-2008-04032 CVE-2008-4202 · GHSA-2mrq-pgfw-gj9v

SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote…

LOW 35

SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL commands via the idd parameter in a deadlink action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-09-24 No fix listed CWE-89

TI-2006-03808 CVE-2006-3932 · GHSA-fjmf-hwmm-3cqv

SQL injection vulnerability in links.php in Gonafish LinksCaffe 3.0 allows remote…

LOW 25

SQL injection vulnerability in links.php in Gonafish LinksCaffe 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.0108 Published 2006-07-31 No fix listed

TI-2006-03763 CVE-2006-3884 · GHSA-5mg3-6f82-mc72

Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow…

MEDIUM 40

Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) offset and (2) limit parameters, (3) newdays parameter in a new action,…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03927 Published 2006-07-27 No fix listed

TI-2006-03762 CVE-2006-3883 · GHSA-p7hc-5xcv-m4j4

Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow…

LOW 28

Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the tablewidth parameter in (a) counter.php; (2) the newdays parameter…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04772 Published 2006-07-27 No fix listed