Ravenphpscripts - vulnerabilities (CVEs)
6 CVEs in 1 products, 0 in the last 30 days, newest from 2009-02-22.
Products
- Ravennuke - 6 CVEs
Newest CVEs of Ravenphpscripts
- CVE-2009-0679 - CVSS 4.3 (medium), 2009-02-22: Cross-site scripting (XSS) vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers to inject arbitrary web script or HTML via…
- CVE-2009-0678 - CVSS 5 (medium), 2009-02-22: images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a…
- CVE-2009-0677 - CVSS 6.5 (medium), 2009-02-22: avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 allows remote authenticated users to execute…
- CVE-2009-0674 - CVSS 6 (medium), 2009-02-22: images/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors are enabled, allows remote attackers to determine the…
- CVE-2009-0673 - CVSS 6.5 (medium), 2009-02-22: Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote authenticated…
- CVE-2009-0672 - CVSS 6.5 (medium), 2009-02-22: SQL injection vulnerability in the Resend_Email module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary…
