Vanilla@1.1.7 Security Vulnerabilities and Issues — Vanilla@1.1.7 CVE List

Lucene search

LussumoVanilla1.1.7

2 matches found

CVE•added 2010/04/09 6:30 p.m.•40 views

CVE-2010-1337

Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10, and possibly 0.9.2 and other versions, allow remote attackers to execute arbitrary PHP code via a URL in the (1) include and (2) Configuration['LANGUAGE'] parameters.

7.5CVSS7.9AI score0.0094EPSS

CVE•added 2009/06/01 7:30 p.m.•32 views

CVE-2009-1845

Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the RequestName parameter.

4.3CVSS5.9AI score0.00959EPSS