Vulnerabilities

TI-2010-04728 CVE-2010-5005 · GHSA-2j74-fvxg-qf8v

Cross-site scripting (XSS) vulnerability in members/profileCommentsResponse.php in Rayzz…

LOW 22

Cross-site scripting (XSS) vulnerability in members/profileCommentsResponse.php in Rayzz Photoz allows remote attackers to inject arbitrary web script or HTML via the profileCommentTextArea parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00845 Published 2011-11-02 No fix listed CWE-79

TI-2007-05945 CVE-2007-6230 · GHSA-9hxf-c4mg-p6jm

Directory traversal vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz…

MEDIUM 42

Directory traversal vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06259 Published 2007-12-04 No fix listed CWE-22

TI-2007-05944 CVE-2007-6229 · GHSA-wf65-7vjm-g92x

PHP remote file inclusion vulnerability in common/classes/class_HeaderHandler.lib.php in…

LOW 37

PHP remote file inclusion vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the CFG[site][project_path] parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02417 Published 2007-12-04 No fix listed CWE-94

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in members/profileCommentsResponse.php in Rayzz…

Directory traversal vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz…

PHP remote file inclusion vulnerability in common/classes/class_HeaderHandler.lib.php in…