Directory traversal vulnerability in popup.php in RadScripts RadLance Gold 7.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the read parameter.
Search vulnerabilities
CVE-2006-2404
CVSS 2.0 · 6.4 Medium
EPSS 3.4%
KEV · Not listed
Vendors
Products
CVE-2009-4692
Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the pr parameter in a ulist action.
CVSS 2.0 · 4.3 Medium
EPSS 1.5%
KEV · Not listed
Vendors
Products
CVE-2009-4694
Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the fid parameter in a view_forum action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS 2.0 · 4.3 Medium
EPSS 1.4%
KEV · Not listed
Vendors
Products
CVE-2009-4695
SQL injection vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a view_forum action.
CVSS 2.0 · 7.5 High
EPSS 1.0%
KEV · Not listed
Vendors
Products
Page 1 of 1.