Lucene search
ExtrosoftThyme
3 matches found
CVE-2008-6404
Cross-site scripting (XSS) vulnerability in add_calendars.php in eXtrovert Software Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the callback parameter.
4.3CVSS5.9AI score0.00144EPSS
CVE-2009-0535
Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the export_to parameter.
7.5CVSS6.9AI score0.00908EPSS
CVE-2006-2117
Cross-site scripting (XSS) vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page.
4.3CVSS5.7AI score0.00558EPSS