Vulnerabilities

TI-2009-04523 CVE-2009-4767 · GHSA-3xwp-pm6c-9mc2

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) input_name and (2) input_text parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01465 Published 2010-04-20 No fix listed CWE-79

TI-2009-04379 CVE-2009-4623 · GHSA-6g86-c9gm-gqg5

Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow…

MEDIUM 49

Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the ACS_path parameter to (1) index.php and (2) admin.php in advanced_co…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.15827 Published 2010-01-18 No fix listed CWE-94

TI-2009-03209 CVE-2009-3367 · GHSA-59fg-mjcp-w8r4

Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) index.php and (2) main.php, and the (3) show paramet…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01446 Published 2009-09-24 No fix listed CWE-79

TI-2009-03208 CVE-2009-3366 · GHSA-v564-86mx-r49f

Directory traversal vulnerability in navigation.php in An image gallery 1.0 allows remote…

LOW 28

Directory traversal vulnerability in navigation.php in An image gallery 1.0 allows remote attackers to list arbitrary directories via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02685 Published 2009-09-24 No fix listed CWE-22

TI-2009-03198 CVE-2009-3356 · GHSA-9g58-r5gj-vhr9

SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands via the show parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2009-09-24 No fix listed CWE-89