Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2023-36995

TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs, or the COOKUSR cookie.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Travianz Project
Products
Travianz
CVE-2023-36994

In TravianZ 8.3.4 and 8.3.3, Incorrect Access Control in the installation script allows an attacker to overwrite the server configuration and inject PHP code.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Travianz Project
Products
Travianz
CVE-2023-36993

The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Travianz Project
Products
Travianz
CVE-2023-36992

PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed
Vendors
Travianz Project
Products
Travianz