Vulnerabilities

TI-2006-03506 CVE-2006-3614 · GHSA-2m2r-w4j8-c29x

index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to trigger a SQL error…

LOW 35

index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to trigger a SQL error via the page_name parameter, possibly due to a SQL injection vulnerability.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01214 Published 2006-07-14 No fix listed

TI-2006-03502 CVE-2006-3610 · GHSA-8fr9-h4c8-rfgv

index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive…

LOW 25

index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive information (partial database schema) via a modified page_name parameter, which reflects portions of an SQL query in the result.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01197 Published 2006-07-14 No fix listed

TI-2006-03501 CVE-2006-3609 · GHSA-fqqj-4xfg-gp9g

Cross-site scripting (XSS) vulnerability in index.php in Orbitcoders OrbitMATRIX 1.0…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to inject arbitrary web script or HTML via the page_name parameter with an IMG tag containing a javascript URI…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0118 Published 2006-07-14 No fix listed

Vulnerabilities

Filters

index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to trigger a SQL error…

index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive…

Cross-site scripting (XSS) vulnerability in index.php in Orbitcoders OrbitMATRIX 1.0…