Vulnerabilities

TI-2008-06503 CVE-2008-6815 · GHSA-ch53-6vvw-hvmw

mykdownload.php in MyKtools 2.4 does not require administrative authentication, which…

LOW 28

mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a database backup by making a direct request, and then sending an unspecified request to the download…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02814 Published 2009-05-28 No fix listed CWE-287

TI-2008-05966 CVE-2008-6273 · GHSA-3x2c-7fr9-38mv

Directory traversal vulnerability in configuration_script.php in MyKtools 3.0 allows…

LOW 29

Directory traversal vulnerability in configuration_script.php in MyKtools 3.0 allows remote authenticated administrators to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.0106 Published 2009-02-25 No fix listed CWE-22

Vulnerabilities

Filters

mykdownload.php in MyKtools 2.4 does not require administrative authentication, which…

Directory traversal vulnerability in configuration_script.php in MyKtools 3.0 allows…