Vulnerabilities

TI-2008-06843 CVE-2008-7155 · GHSA-x8mf-jq4w-r293

NetRisk 1.9.7 does not properly restrict access to admin/change_submit.php, which allows…

LOW 37

NetRisk 1.9.7 does not properly restrict access to admin/change_submit.php, which allows remote attackers to change the password of arbitrary users via a direct request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02328 Published 2009-09-02 No fix listed CWE-264

TI-2008-00170 CVE-2008-0186 · GHSA-xg85-49cx-w236

Cross-site scripting (XSS) vulnerability in index.php in NetRisk 1.9.7 and possibly…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to CVE-2008-0144.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01524 Published 2008-01-09 No fix listed CWE-79

TI-2008-00133 CVE-2008-0144 · GHSA-7rrf-98rx-8v5m

PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows…

MEDIUM 62

PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.4484 Published 2008-01-08 No fix listed CWE-89

Vulnerabilities

Filters

NetRisk 1.9.7 does not properly restrict access to admin/change_submit.php, which allows…

Cross-site scripting (XSS) vulnerability in index.php in NetRisk 1.9.7 and possibly…

PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows…