Ravenphpscripts Ravennuke
6 CVEs affecting Ravenphpscripts Ravennuke. Latest disclosed: 2009-02-22. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-0679 | | 2009-02-22 | Cross-site scripting (XSS) vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers to inject arbitrary web script or HTML via unspec… | |
CVE-2009-0678 | | 2009-02-22 | images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a… | |
CVE-2009-0677 | | 2009-02-22 | avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 allows remote authenticated users to execute arbit… | |
CVE-2009-0674 | | 2009-02-22 | images/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors are enabled, allows remote attackers to determine the existen… | |
CVE-2009-0673 | | 2009-02-22 | Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote authenticated administr… | |
CVE-2009-0672 | | 2009-02-22 | SQL injection vulnerability in the Resend_Email module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary SQL… |