Vulnerabilities

TI-2008-01572 CVE-2008-1640 · GHSA-jwpf-wj29-5r92

SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and…

LOW 35

SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board (wBB) allows remote attackers to execute arbitrary SQL commands via the view_id parameter in an a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-04-02 No fix listed CWE-89

TI-2006-00902 CVE-2006-0927 · GHSA-r545-f276-c68r

Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0…

LOW 17

Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board (wBB) 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) userid p…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02088 Published 2006-02-28 No fix listed

TI-2005-01544 CVE-2005-1635 · GHSA-h3f2-h685-8j5j

JGS-XA JGS-Portal 3.0.2 and earlier allows remote attackers to obtain the full server…

LOW 25

JGS-XA JGS-Portal 3.0.2 and earlier allows remote attackers to obtain the full server path via direct requests to (1) jgs_portal_ref.php, (2) jgs_portal_land.php, (3) jgs_portal_log.php, (4) jgs_portal_global_sponsor.php…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01194 Published 2005-05-17 No fix listed

TI-2005-01543 CVE-2005-1634 · GHSA-27jx-wc84-xqv7

Multiple cross-site scripting (XSS) vulnerabilities in JGS-XA JGS-Portal 3.0.2 and…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) anzahl_beitraege parameter to jgs_portal.php, (2) year…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01375 Published 2005-05-17 No fix listed

TI-2005-01542 CVE-2005-1633 · GHSA-7528-f25h-5m3v

Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow…

LOW 37

Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) anzahl_beitraege parameter to jgs_portal.php, 2) year parameter to (jgs_p…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01996 Published 2005-05-17 No fix listed

TI-2005-01401 CVE-2005-1479 · GHSA-4c2g-m42x-g5p2

SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows…

LOW 36

SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01353 Published 2005-05-11 No fix listed