Vulnerabilities

TI-2011-04574 CVE-2011-5302 · GHSA-j44q-j7m5-pf6h

Cross-site request forgery (CSRF) vulnerability in adm/admin_edit.php in PHPDug 2.0.0…

LOW 31

Cross-site request forgery (CSRF) vulnerability in adm/admin_edit.php in PHPDug 2.0.0 allows remote attackers to hijack the authentication of administrators for requests that modify credentials.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00609 Published 2015-01-01 No fix listed CWE-352

TI-2011-04573 CVE-2011-5301 · GHSA-2pr3-45mh-ph8r

Multiple cross-site scripting (XSS) vulnerabilities in PHPDug 2.0.0 allow remote…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in PHPDug 2.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the story_url parameter to add_story.php, (2) the email parameter to editprofile.p…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00966 Published 2015-01-01 No fix listed CWE-79

TI-2008-02011 CVE-2008-2091 · GHSA-g9cj-r9fp-5vgp

Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote…

LOW 37

Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute arbitrary local files via the i parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02286 Published 2008-05-06 No fix listed CWE-22

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in adm/admin_edit.php in PHPDug 2.0.0…

Multiple cross-site scripting (XSS) vulnerabilities in PHPDug 2.0.0 allow remote…

Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote…