Vulnerabilities

TI-2010-03067 CVE-2010-3208 · GHSA-3jvh-qjxv-65c8

Cross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and…

LOW 22

Cross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the post_text parameter in a site custom_search action to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01075 Published 2010-09-03 No fix listed CWE-79

TI-2009-03062 CVE-2009-3217 · GHSA-prcv-xr7q-82jv

SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers…

LOW 35

SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers to execute arbitrary SQL commands via the member_id parameter in an edit_user action to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00947 Published 2009-09-16 No fix listed CWE-89

TI-2009-03061 CVE-2009-3216 · GHSA-wrwm-4qrx-hh9h

Multiple directory traversal vulnerabilities in iWiccle 1.01, when magic_quotes_gpc is…

LOW 24

Multiple directory traversal vulnerabilities in iWiccle 1.01, when magic_quotes_gpc is disabled, allow remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02289 Published 2009-09-16 No fix listed CWE-22

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and…

SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers…

Multiple directory traversal vulnerabilities in iWiccle 1.01, when magic_quotes_gpc is…