Vulnerabilities

TI-2008-03240 CVE-2008-3379 · GHSA-m7qv-8x33-wwfg

Cross-site scripting (XSS) vulnerability in Snark VisualPic 0.3.1 allows remote attackers…

LOW 22

Cross-site scripting (XSS) vulnerability in Snark VisualPic 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the pic parameter to the default URI.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00845 Published 2008-07-30 No fix listed CWE-79

TI-2008-01803 CVE-2008-1876 · GHSA-x2xw-v9gc-w4fr

PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote…

MEDIUM 52

PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the _CONFIG[files][functions_page] parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.27598 Published 2008-04-17 No fix listed CWE-94

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in Snark VisualPic 0.3.1 allows remote attackers…

PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote…