Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Kreotek Clear all filters
TI-2009-03577 CVE-2009-3756 · GHSA-848g-j7cv-9644

phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request…

Priority LOW 27

phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) the show action in advancedsearch.php, and (4) choicelist.php, which reveals the installatio…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02286 Published 2009-10-22 No fix listed CWE-200
TI-2009-03576 CVE-2009-3755 · GHSA-3g3v-38p3-hjvm

Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php and (2) modules\base\myaccount.php; and the PATH_INFO to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01247 Published 2009-10-22 No fix listed CWE-79