VYPR

Directtopics

by Directtopics

CVEs (3)

  • CVE-2005-1569May 14, 2005
    risk 0.00cvss epss 0.00

    Cross-site scripting (XSS) vulnerability in DirectTopics 2.1 and 2.2 allows remote attackers to inject arbitrary web script via a javascript: URL in (1) a thread or (2) an IMG tag.

  • CVE-2005-1568May 12, 2005
    risk 0.00cvss epss 0.00

    topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to obtain sensitive information via an invalid topic parameter, which reveals the path in an error message.

  • CVE-2005-1567May 12, 2005
    risk 0.00cvss epss 0.00

    SQL injection vulnerability in topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter.