Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-71624

esoTalk 1.0.0g4 Remote Code Execution via PHP Code Injection in Configuration

An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class.php, core/controllers/ETMemberController.class.php, and core/lib/ET.class.php components

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Esotalk
Products
Esotalk
CVE-2015-9285

esoTalk 1.0.0g4 has XSS via the PATH_INFO to the conversations/ URI.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Esotalk
Products
Esotalk