Vulnerabilities

TI-2007-02126 CVE-2007-2205 · GHSA-27pv-53mj-ff4j

PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management…

LOW 39

PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System (LMS) 1.5.3, and possibly 1.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the _LIB_DIR parameter, a d…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03139 Published 2007-04-24 No fix listed

TI-2007-02119 CVE-2007-2198 · GHSA-4jmf-47xq-xvf3

Cross-site scripting (XSS) vulnerability in LAN Management System (LMS) before 1.6.9…

LOW 23

Cross-site scripting (XSS) vulnerability in LAN Management System (LMS) before 1.6.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving the OD parameter to contrib/…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2007-04-24 No fix listed

TI-2007-01583 CVE-2007-1643 · GHSA-hr23-48mp-cj3p

Multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9…

MEDIUM 56

Multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in (1) the CONFIG[directories][userpanel_dir] parame…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10871 Published 2007-03-24 No fix listed CWE-94

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management…

Cross-site scripting (XSS) vulnerability in LAN Management System (LMS) before 1.6.9…

Multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9…