Tufat

9 CVEs across 6 Tufat products. Browse Tufat vulnerabilities, severities, and proof-of-concept exploits.

Tufat products with known CVEs

ProductCVEs
Flashbb2
Flashchat2
Mybackup2
Flashcard1
Mycard1
Osdate1
Tufat CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2013-100382025-07-31An unauthenticated arbitrary file upload vulnerability exists in FlashChat versions 6.0.2 and 6.0.4 through 6.0.8. The upload.php endpoint fails to properly va…
CVE-2009-49782010-08-25Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
CVE-2009-49772010-08-25PHP remote file inclusion vulnerability in index.php in MyBackup 1.4.0 allows remote authenticated users to execute arbitrary PHP code via a URL in the main_co…
CVE-2010-18722010-05-12Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the id…
CVE-2010-10552010-03-23Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote a…
CVE-2008-67992009-05-07connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting the s parameter to…
CVE-2008-47382008-10-24SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2007-36972007-07-11PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code via a URL in the ph…
CVE-2006-70322007-02-23PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to execute arbitrary code via a URL in the php…