Speedtech - vulnerabilities (CVEs)

5 CVEs in 2 products, 0 in the last 30 days, newest from 2010-06-07.

Products

CVE-2010-2158 - CVSS 2.1 (low), 2010-06-07: Multiple cross-site scripting (XSS) vulnerabilities in the Storm module 5.x and 6.x before 6.x-1.33 for Drupal allow remote authenticated users, with certain…
CVE-2010-2123 - CVSS 2.1 (low), 2010-06-01: Multiple cross-site scripting (XSS) vulnerabilities in the Storm module 5.x and 6.x before 6.x-1.33 for Drupal allow remote authenticated users, with certain…
CVE-2009-4515 - CVSS 5 (medium), 2009-12-31: The Storm module 6.x before 6.x-1.25 for Drupal does not enforce privilege requirements for storminvoiceitem nodes, which allows remote attackers to read node…
CVE-2007-4738 - CVSS 7.5 (high), 2007-09-06: Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a…
CVE-2007-4737 - CVSS 7.5 (high), 2007-09-06: Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a…