Vulnerabilities

TI-2008-02186 CVE-2008-2280 · GHSA-4m8r-wpj3-88fh

Cross-site scripting (XSS) vulnerability in admin/index.php in Script PHP PicEngine 1.0…

LOW 22

Cross-site scripting (XSS) vulnerability in admin/index.php in Script PHP PicEngine 1.0 allows remote attackers to inject arbitrary web script or HTML via the l parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01062 Published 2008-05-16 No fix listed CWE-79

TI-2006-06324 CVE-2006-6580 · GHSA-mjh6-v3q6-4w2g

admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news…

LOW 31

admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote attackers to add or delete information within an item, and possibly have other impacts.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01174 Published 2006-12-15 No fix listed

TI-2006-06266 CVE-2006-6521 · GHSA-328v-h46h-6c7p

SQL injection vulnerability in lire-avis.php in Messageriescripthp 2.0 allows remote…

LOW 35

SQL injection vulnerability in lire-avis.php in Messageriescripthp 2.0 allows remote attackers to execute arbitrary SQL commands via the aa parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01085 Published 2006-12-14 No fix listed

TI-2006-06265 CVE-2006-6520 · GHSA-fvv3-577f-h3wm

Multiple cross-site scripting (XSS) vulnerabilities in Messageriescripthp 2.0 allow…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) pseudo parameter to (a) existepseudo.php, the (2) email parameter to…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02142 Published 2006-12-14 No fix listed

TI-2006-06264 CVE-2006-6519 · GHSA-m373-j4rh-vrjp

SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to…

LOW 35

SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to execute arbitrary SQL commands via the aa parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01073 Published 2006-12-14 No fix listed

TI-2006-06263 CVE-2006-6518 · GHSA-pg23-vmcr-c2rg

Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) date, (4) sujet, (5) message, (6) site, and (7) lien par…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01881 Published 2006-12-14 No fix listed

TI-2006-06227 CVE-2006-6480 · GHSA-j35p-wrrg-93r7

admin/admin_membre/fiche_membre.php in AnnonceScriptHP 2.0 allows remote attackers to…

LOW 26

admin/admin_membre/fiche_membre.php in AnnonceScriptHP 2.0 allows remote attackers to obtain sensitive information via the idmembre parameter, which discloses the passwords for arbitrary users.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0133 Published 2006-12-12 No fix listed

TI-2006-06226 CVE-2006-6479 · GHSA-h9ch-mjj3-fc86

Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the email parameter in (1) erreurinscription.php, (2) Templates/admin.dwt.php,…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02142 Published 2006-12-12 No fix listed

TI-2006-06225 CVE-2006-6478 · GHSA-32gg-h794-83vh

Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to…

MEDIUM 46

Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) email.php, the (2) no parameter in (b) voirannonce.php, the (3) idmem…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.10525 Published 2006-12-12 No fix listed

Vulnerabilities

Filters