CVE-2005-1716

The CVE refers to TOPo 2.2 (2.2.178), where data files are stored in the data directory under the web document root with insufficient access control. This could allow remote attackers to view sensitive information, such as client IP addresses. Connected documents (e.g., Red Hat advisory and CVE l...

CVE-2006-3536

CVE-2006-3536 affects EJ3 TOPo (versions up to 2.2.178). The vulnerability is a direct static code injection flaw in code/class_db_text.php, enabling remote attackers to run arbitrary PHP code by providing crafted values (e.g., descripcion, pais) that are stored directly in a PHP script. Impact i...

CVE-2005-1715

CVE-2005-1715 describes a reflected cross-site scripting vulnerability in TOPo 2.2 (version 2.2.178), specifically in index.php. The issue allows remote attackers to inject arbitrary script/HTML via several inputs in the comments section and related fields: (1) m, (2) s, (3) ID, (4) t, and (5) fi...

CVE-2006-3833

This CVE affects EJ3 TOPo 2.2.178 and concerns index.php handling in EJ3 TOPo where a modified entry ID in a URL allows remote attackers to overwrite existing entries and create new passwords for those entries. Root cause appears to be improper handling of entry IDs in the web interface, enabling...

CVE-2006-0984

CVE-2006-0984 affects EJ3 TOPo version 2.2.178, where the script inc_header.php is vulnerable to cross-site scripting (XSS). The underlying issue is that the gTopNombre parameter is used in a way that allows remote attackers to inject arbitrary web script or HTML. The NVD entry lists an overall C...

CVE-2006-3834

EJ3 TOPo 2.2.178 is affected: the product stores the password in cleartext in the ID field used by index.php, enabling context-dependent attackers to obtain entry passwords via log files, referrers, or similar vectors. The available sources (NVD/NVD listing) describe this plaintext password expos...

CVE-2003-1409

TOPo 1.43 is affected by an information disclosure vulnerability. Sending an HTTP request with an invalid parameter to in.php or out.php can reveal the path to the TOPo directory in the error message, enabling potential information disclosure to remote attackers. Exploit details (e.g., exploit co...