Vulnerabilities

TI-2024-37028 CVE-2024-55992 · GHSA-c36x-7qg6-qwjj

WordPress WooCommerce Basic Ordernumbers plugin <= 1.4.4 - Broken Access Control vulnerability

LOW 25

Missing Authorization vulnerability in Open Tools WooCommerce Basic Ordernumbers woocommerce-basic-ordernumbers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Basic…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0041 Published 2024-12-16 No fix listed CWE-862

TI-2006-06815 CVE-2006-7073 · GHSA-2mv3-9m4h-pmr6

Cross-site scripting (XSS) vulnerability in Opentools Attachment Mod before 2.4.5 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in Opentools Attachment Mod before 2.4.5 allows remote attackers to inject arbitrary web script or HTML in Internet Explorer via unknown vectors related to the uploaded attachment…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0112 Published 2007-02-27 No fix listed

TI-2005-01539 CVE-2005-1630 · GHSA-7hwg-m4xp-gx8h

Unknown vulnerability in Attachment Mod before 2.3.13, related to a "serious issue with…

LOW 35

Unknown vulnerability in Attachment Mod before 2.3.13, related to a "serious issue with realnames," has unknown impact and attack vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01103 Published 2005-05-17 No fix listed

TI-2004-01281 CVE-2004-1404 · GHSA-94v8-q3q5-ph58

Attachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, does not properly…

LOW 38

Attachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, does not properly handle files with multiple file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02915 Published 2005-02-12 No fix listed

TI-2004-01276 CVE-2004-1399 · GHSA-gvx4-48q9-3jpv

Directory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB…

LOW 26

Directory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01686 Published 2005-02-12 No fix listed