Vulnerabilities

TI-2010-04333 CVE-2010-4608 · GHSA-8j4q-jx97-vfcm

Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request…

LOW 28

Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) comments_items.php in system/admin/, which reveals the installation path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02445 Published 2010-12-29 No fix listed CWE-200

TI-2010-04332 CVE-2010-4607 · GHSA-p938-837q-c8xf

Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when…

LOW 16

Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) additem_form parameter to system/admin/dash…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01551 Published 2010-12-29 No fix listed CWE-79

Vulnerabilities

Filters

Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request…

Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when…