105 matches found
CVE-2008-4167
CVE-2008-4167 affects Easy Photo Gallery (Ezphotogallery) 2.1. The issue: useradmin.php does not require administrative authentication, allowing remote attackers to (1) add or (2) remove an Administrator account. The root cause, per the description, is a lack of authentication for admin account m...
6.4CVSS6.7AI score0.02606EPSS
SaveExploits1References5Affected Software1
CVE-2005-4167
CVE-2005-4167 affects eFiction 1.0 and 1.1, where the let parameter in titles.php’s viewlist action is not sanitized, enabling stored or reflected XSS by remote attackers to inject arbitrary script/HTML. The vulnerability arises from unsanitized user input used to generate dynamic pages, allowing...
4.3CVSS5.7AI score0.03579EPSS
SaveExploits2References5Affected Software1
MS:53F3588B-F9AC-4167-97AC-C6C28C3F8917
...
7AI score
SaveExploits0
20