Vulnerabilities

TI-2006-04376 CVE-2006-4530 · GHSA-97qx-c6q5-4f9j

Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows…

LOW 36

Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute arbitrary PHP code via the aifon parameter, which is injected into include/variable.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01709 Published 2006-09-01 No fix listed

TI-2006-04375 CVE-2006-4529 · GHSA-f5vj-rpp3-rw8v

SQL injection vulnerability in recherchemembre.php in membrepass 1.5.

LOW 37

SQL injection vulnerability in recherchemembre.php in membrepass 1.5.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02099 Published 2006-09-01 No fix listed

TI-2006-04374 CVE-2006-4528 · GHSA-7gg8-gg4j-88c2

Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) recherche parameter in recherchemembre.php and the (2) email parameter in te…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01342 Published 2006-09-01 No fix listed

Vulnerabilities

Filters

Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows…

SQL injection vulnerability in recherchemembre.php in membrepass 1.5.

Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote…