Search vulnerabilities

Results 3

Export CSV
CVE-2007-4100

MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/web_infos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist.

CVSS 2.0 · 5.0 Medium EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2009-0753

mldonkey: arbitrary file read vulnerability

Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files via a leading "//" (double slash) in the filename.

CVSS 2.0 · 5.0 Medium EPSS 5.8% KEV · Not listed
Vendors
Products
CVE-2003-1164

Cross-site scripting (XSS) vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Products