Vulnerabilities

TI-2006-05129 CVE-2006-5316 · GHSA-r2jx-m375-vp2w

registroTL stores sensitive information under the web root with insufficient access…

LOW 39

registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02812 Published 2006-10-17 No fix listed

TI-2006-05128 CVE-2006-5315 · GHSA-8j9h-39hc-ghf3

PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers…

LOW 39

PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code via an ftp:// URL in the page parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0317 Published 2006-10-17 No fix listed

TI-2006-05127 CVE-2006-5314 · GHSA-7gx8-9xc9-f45h

PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows…

LOW 39

PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0317 Published 2006-10-17 No fix listed

Vulnerabilities

Filters

registroTL stores sensitive information under the web root with insufficient access…

PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers…

PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows…