Vulnerabilities

TI-2010-01024 CVE-2010-1065 · GHSA-836h-q5p2-g2rc

Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root…

LOW 28

Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/lebisoft.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02488 Published 2010-03-23 No fix listed CWE-264

TI-2007-03299 CVE-2007-3405 · GHSA-wpfm-275v-5frm

Multiple cross-site scripting (XSS) vulnerabilities in defter_yaz.asp in Lebisoft zdefter…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in defter_yaz.asp in Lebisoft zdefter 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) ad and (2) konu parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2007-06-26 No fix listed CWE-79

Vulnerabilities

Filters

Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root…

Multiple cross-site scripting (XSS) vulnerabilities in defter_yaz.asp in Lebisoft zdefter…