Vendor
Tutos
Products
1
CVEs
4
Across products
4
Status
Private
Products
1- 4 CVEs
Recent CVEs
4| CVE | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2008-0149 | 0.04 | — | 0.07 | Jan 9, 2008 | TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function. | ||
| CVE-2004-2162 | 0.04 | — | 0.10 | Dec 31, 2004 | Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the search field of the Address Module or (2) the t parameter to app_new.php. | ||
| CVE-2008-0148 | 0.03 | — | 0.06 | Jan 9, 2008 | TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request. | ||
| CVE-2004-2161 | 0.03 | — | 0.03 | Dec 31, 2004 | SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the link_id parameter. |
- CVE-2008-0149Jan 9, 2008risk 0.04cvss —epss 0.07
TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function.
- CVE-2004-2162Dec 31, 2004risk 0.04cvss —epss 0.10
Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the search field of the Address Module or (2) the t parameter to app_new.php.
- CVE-2008-0148Jan 9, 2008risk 0.03cvss —epss 0.06
TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request.
- CVE-2004-2161Dec 31, 2004risk 0.03cvss —epss 0.03
SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the link_id parameter.