Vulnerabilities

3 records

Sort

TI-2002-01803 CVE-2002-1884 · GHSA-j2q8-q6cm-rx6f

index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by…

LOW 38

index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the pymembs parameter to "admin".

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02657 Published 2005-06-28 No fix listed

TI-2003-00694 CVE-2003-0751 · GHSA-538c-wc5m-m9hh

SQL injection vulnerability in pass_done.php for PY-Membres 4.2 and earlier allows remote…

LOW 35

SQL injection vulnerability in pass_done.php for PY-Membres 4.2 and earlier allows remote attackers to execute arbitrary SQL queries via the email parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01234 Published 2003-09-06 No fix listed

TI-2003-00693 CVE-2003-0750 · GHSA-gcmm-9p9g-4x5h

secure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication…

LOW 37

secure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication by setting the adminpy parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02227 Published 2003-09-06 No fix listed

Vulnerabilities

Filters

index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by…

SQL injection vulnerability in pass_done.php for PY-Membres 4.2 and earlier allows remote…

secure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication…