Search vulnerabilities

Results 23

Export CSV
CVE-2006-0878

Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, as demonstrated by classifieds/gorum/category.php.

CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Vendors
CVE-2003-1088

Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML via the method parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Products
CVE-2003-1089

index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the path in a PHP error message.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Products