Vulnerabilities

TI-2006-00196 CVE-2006-0205 · GHSA-4prf-63vx-hrch

Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1)…

LOW 27

Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute arbitrary SQL commands and bypass authentication via the password field in the login action to index.php (involving v_login.…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.01944 Published 2006-01-13 No fix listed CWE-89

TI-2006-00195 CVE-2006-0204 · GHSA-9699-8gv5-47m4

Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) the "Course name" field in index.php when the frm parameter has the value "mine…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01463 Published 2006-01-13 No fix listed

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1)…

Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote…