2 matches found
PT-2015-7380
Name of the Vulnerable Software and Affected Versions SecureMoz Security Audit plugin version 1.0.5 and earlier Description The issue concerns the tweet info function in the class/ functions.php file, which does not utilize an HTTPS session for downloading serialized data. This oversight allows...
6.8CVSS0.01907EPSS
SaveExploits1References5
CVE-2006-6259: Undefined Security Weakness
Multiple directory traversal vulnerabilities in a class/functions.php and b class/mbro.php in AlternC 0.9.5 and earlier allow remote attackers to 1 create arbitrary files and directories via a .. dot dot in the "create name" field and 2 read arbitrary files via a .. dot dot in the "web root" fiel...
10CVSS6AI score0.03809EPSS
SaveExploits1References1
20