Search vulnerabilities

Results 2

Export CSV
CVE-2007-0846

Cross-site scripting (XSS) vulnerability in forum.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote attackers to inject arbitrary HTML or web script via the name parameter.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed
CVE-2007-0847

SQL injection vulnerability in mod/PM/reply.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to priv.php.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed