Vulnerabilities

TI-2005-02457 CVE-2005-2593 · GHSA-pc8h-c72v-h5j6

Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors.

MEDIUM 45

Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01239 Published 2005-08-17 No fix listed

TI-2005-02456 CVE-2005-2592 · GHSA-cfm9-2jwq-3xwx

Unknown vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers…

LOW 36

Unknown vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to bypass authentication via unknown vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01635 Published 2005-08-17 No fix listed

TI-2005-02455 CVE-2005-2591 · GHSA-f4xx-xhv8-836j

Parlano MindAlign 5.0 and later versions allows remote attackers to list valid users via…

LOW 26

Parlano MindAlign 5.0 and later versions allows remote attackers to list valid users via unknown vectors, aka the "User Enumeration" vulnerability.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01388 Published 2005-08-17 No fix listed

TI-2005-02454 CVE-2005-2590 · GHSA-7hhj-2pxc-rx4h

Cross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later versions…

LOW 22

Cross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2005-08-17 No fix listed

Vulnerabilities

Filters

Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors.

Unknown vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers…

Parlano MindAlign 5.0 and later versions allows remote attackers to list valid users via…

Cross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later versions…