Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2021-41975

Tad TadTools - Improper Authorization

TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Tadtools Project
Products
Tadtools
CVE-2021-41566

Tad TadTools - Arbitrary File Upload

The file extension of the TadTools file upload function fails to filter, thus remote attackers can upload any types of files and execute arbitrary code without logging in.

CVSS 3.1 · 9.8 Critical EPSS 2.0% KEV · Not listed
Vendors
Tadtools Project
Products
Tadtools
CVE-2021-41565

Tad TadTools - Reflected XSS

TadTools special page parameter does not properly restrict the input of specific characters, thus remote attackers can inject JavaScript syntax without logging in, and further perform reflective XSS attacks.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Tadtools Project
Products
Tadtools