Vulnerabilities

TI-2006-06858 CVE-2006-7117 · GHSA-4jww-mhxc-7mmm

Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote…

LOW 34

Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly han…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02027 Published 2007-03-06 No fix listed CWE-22

TI-2006-06857 CVE-2006-7116 · GHSA-v2hx-f32x-8fh9

SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows…

LOW 35

SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the member_id parameter ($id variable) to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01176 Published 2007-03-06 No fix listed CWE-89

Vulnerabilities

Filters

Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote…

SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows…