Vulnerabilities

TI-2007-04378 CVE-2007-4523 · GHSA-j34x-wmhc-q593

Multiple cross-site scripting (XSS) vulnerabilities in Ripe Website Manager 0.8.9 and…

LOW 19

Multiple cross-site scripting (XSS) vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via one or more of the following vectors: the (1) id p…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0115 Published 2007-08-25 No fix listed

TI-2007-04377 CVE-2007-4522 · GHSA-fh44-j3pc-3p3h

Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow…

LOW 30

Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the (1) id parameter to (a) pa…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.0173 Published 2007-08-25 No fix listed

TI-2007-03418 CVE-2007-3525 · GHSA-2frc-rr43-3rq2

Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration…

LOW 37

Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01426 Published 2007-07-03 No fix listed

TI-2007-03417 CVE-2007-3524 · GHSA-97cw-rp4w-hv59

Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and…

HIGH 66

Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to (1) admin/includes/author_panel_header…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.642 Published 2007-07-03 No fix listed

TI-2007-02128 CVE-2007-2207 · GHSA-wv2c-652m-j8wx

SQL injection vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and…

LOW 36

SQL injection vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ripeformpost parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01691 Published 2007-04-24 No fix listed

TI-2007-02127 CVE-2007-2206 · GHSA-wjj7-rg76-c4fh

Cross-site scripting (XSS) vulnerability in contact/index.php in Ripe Website Manager…

LOW 23

Cross-site scripting (XSS) vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a leading "<"<" in the ripeformpost pa…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01294 Published 2007-04-24 No fix listed CWE-79