VYPR

Nitrotech

by Nitrotech

CVEs (3)

  • CVE-2006-6938Jan 17, 2007
    risk 0.04cvss epss 0.07

    Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote attackers to include arbitrary files via ".." sequences in the root parameter.

  • CVE-2008-5334Dec 5, 2008
    risk 0.03cvss epss 0.03

    PHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.

  • CVE-2008-5333Dec 5, 2008
    risk 0.03cvss epss 0.00

    SQL injection vulnerability in members.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary SQL commands via the id parameter.