Vulnerabilities

TI-2006-04474 CVE-2006-4628 · GHSA-4jvf-cc99-p798

Cross-site scripting (XSS) vulnerability in VCD-db before 0.983 allows remote attackers…

LOW 22

Cross-site scripting (XSS) vulnerability in VCD-db before 0.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when handling comments.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0118 Published 2006-09-08 No fix listed

TI-2005-03986 CVE-2005-4241 · GHSA-2gqj-p7m3-px6g

Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier…

LOW 24

Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inject arbitrary web script or HTML via the batch parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01752 Published 2005-12-14 No fix listed

TI-2005-03985 CVE-2005-4240 · GHSA-5hqm-r2hv-cmwq

SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote…

LOW 35

SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL commands via the by parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01149 Published 2005-12-14 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in VCD-db before 0.983 allows remote attackers…

Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier…

SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote…