Eyeos Project Eyeos
5 CVEs affecting Eyeos Project Eyeos. Latest disclosed: 2007-08-31. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2007-4609 | | 2007-08-31 | eyeOS uses predictable checksum values in the checknum parameter for access control, which allows remote attackers to register many accounts via doCreateUser a… | |
CVE-2006-5071 | | 2006-09-28 | Multiple cross-site scripting (XSS) vulnerabilities in eyeOS before 0.9.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors… | |
CVE-2006-0636 | | 2006-02-10 | desktop.php in eyeOS 0.8.9 and earlier tests for the existence of the _SESSION variable before calling the session_start function, which allows remote attacker… | |
CVE-2005-3414 | | 2005-11-01 | eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attackers to obtain user credentials. | |
CVE-2005-3413 | | 2005-11-01 | Cross-site scripting (XSS) vulnerability in desktop.php in eyeOS 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the motd parameter. |