Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority LOW 35

Unrestricted file upload vulnerability in admin.php in MCshoutbox 1.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request t…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0357 Published 2009-10-16 No fix listed CWE-264
Priority LOW 34

Multiple SQL injection vulnerabilities in scr_login.php in MCshoutbox 1.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0198 Published 2009-10-16 No fix listed CWE-89