Tutos
Products
1- 6 CVEs
Recent CVEs
6| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2008-0149 | 0.04 | — | 0.08 | Jan 9, 2008 | TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function. | |||
| CVE-2003-0482 | 0.04 | — | 0.07 | Aug 7, 2003 | TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository containing the code. | |||
| CVE-2008-0148 | 0.03 | — | 0.06 | Jan 9, 2008 | TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request. | |||
| CVE-2004-2162 | 0.03 | — | 0.04 | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the search field of the Address Module or (2) the t parameter to app_new.php. | |||
| CVE-2004-2161 | 0.03 | — | 0.03 | Dec 31, 2004 | SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the link_id parameter. | |||
| CVE-2003-0481 | 0.03 | — | 0.03 | Aug 7, 2003 | Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to file_select.php. |
- CVE-2008-0149Jan 9, 2008risk 0.04cvss —epss 0.08
TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function.
- CVE-2003-0482Aug 7, 2003risk 0.04cvss —epss 0.07
TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository containing the code.
- CVE-2008-0148Jan 9, 2008risk 0.03cvss —epss 0.06
TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request.
- CVE-2004-2162Dec 31, 2004risk 0.03cvss —epss 0.04
Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the search field of the Address Module or (2) the t parameter to app_new.php.
- CVE-2004-2161Dec 31, 2004risk 0.03cvss —epss 0.03
SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the link_id parameter.
- CVE-2003-0481Aug 7, 2003risk 0.03cvss —epss 0.03
Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to file_select.php.