Search vulnerabilities

Results 2

Export CSV
CVE-2009-4854

addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter.

CVSS 2.0 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Products
CVE-2009-4874

TalkBack 2.3.14 does not properly restrict access to the edit comment feature (comments.php), which allows remote attackers to modify comments.

CVSS 2.0 · 6.4 Medium EPSS 2.6% KEV · Not listed
Vendors
Products