CVE-2000-1166

CVE-2000-1166 affects the Twig webmail system. The issue arises when the vhosts variable isn’t set on the site, allowing a remote attacker to inject arbitrary PHP (PHP3) code by supplying an alternate vhosts value to index.php3. Root cause: improper handling of the vhosts variable during initiali...

CVE-2001-1361

The CVE-2001-1361 entry concerns The Web Information Gateway (TWIG) 2.7.1, described as potentially related to incorrect security rights and/or the generation of mailto links. Based on the connected documents, there are no additional technical specifics (no explicit root cause details, affected s...

CVE-2001-1348

TWIG 2.6.2 and earlier are vulnerable to SQL injection via the id parameter, allowing remote attackers to perform unauthorized database operations. The issue is documented against TWIG, with a remote, network-exploitable vector and potential data integrity/ confidentiality impacts. No remediation...