Vulnerabilities

TI-2016-06569 CVE-2016-7817 · GHSA-5c54-43wg-86rc

Cross-site scripting in LEMON-S PHP Simple keitai chat

LOW 29

Cross-site scripting vulnerability in Simple keitai chat 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00872 Published 2017-06-09 No fix listed CWE-79

TI-2015-02643 CVE-2015-2989 · GHSA-w4mf-q8hp-5fgh

Cross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Twit BBS allows…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0095 Published 2015-09-07 No fix listed CWE-79

TI-2015-02628 CVE-2015-2974 · GHSA-c862-pfgc-5rp7

LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML…

LOW 26

LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML documents via vectors involving a crafted image file.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01344 Published 2015-07-29 No fix listed CWE-20

TI-2015-02624 CVE-2015-2970 · GHSA-4559-h45q-86vm

index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to delete…

LOW 32

index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to delete arbitrary files via the oekakis parameter.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01611 Published 2015-07-10 No fix listed CWE-22

TI-2015-02623 CVE-2015-2969 · GHSA-374h-xqp9-v748

Cross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS…