Lucene search

K
OlateOlatedownload

7 matches found

CVE
CVE
added 2007/08/18 9:17 p.m.42 views

CVE-2007-4419

Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentication cookie, which makes it easier for remote attackers to guess the cookie and access the Admin area.

9.3CVSS6.9AI score0.09079EPSS
CVE
CVE
added 2006/10/05 4:4 a.m.34 views

CVE-2006-5144

Cross-site scripting (XSS) vulnerability in userupload.php in OlateDownload 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the description_small parameter.

6.8CVSS5.9AI score0.01194EPSS
CVE
CVE
added 2007/08/18 9:17 p.m.34 views

CVE-2007-4421

SQL injection vulnerability in Admin.php in Olate Download (od) 3.4.1 allows remote attackers to execute arbitrary SQL commands via an OD3_AutoLogin cookie.

9.3CVSS8.4AI score0.02726EPSS
CVE
CVE
added 2006/10/05 4:4 a.m.33 views

CVE-2006-5145

Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.php or the (2) query parameter in search.php.

7.5CVSS8.9AI score0.00439EPSS
CVE
CVE
added 2007/08/21 6:17 p.m.33 views

CVE-2007-4454

Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the (1) PDO::ATTR_SERVER_VERSION or (2) PDO::ATTR_CLIENT_VERSION attribute.

6.8CVSS7.6AI score0.00822EPSS
CVE
CVE
added 2007/08/27 9:17 p.m.31 views

CVE-2007-4541

Multiple cross-site scripting (XSS) vulnerabilities in Olate Download (od) 3.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the PHP_SELF variable in modules/core/uim.php and (2) [url] tags in a comment in modules/core/fldm.php.

4.3CVSS5.8AI score0.00404EPSS
CVE
CVE
added 2007/08/27 9:17 p.m.25 views

CVE-2007-4540

Multiple SQL injection vulnerabilities in download.php in Olate Download (od) 3.4.2 allow remote attackers to execute arbitrary SQL commands via the (1) HTTP_REFERER or (2) HTTP_USER_AGENT HTTP header.

7.5CVSS8.5AI score0.00706EPSS