Xentraz » Liens Dynamiques : Security Vulnerabilities, CVEs,
(1) admin/adminlien.php3 and (2) admin/modif.php3 in liens_dynamiques 2.1 do not require authentication, which allows remote attackers to perform unauthorized administrative actions using a direct request.
Max CVSS
7.5
EPSS Score
0.90%
Published
2007-01-18
Updated
2018-10-16
Cross-site scripting (XSS) vulnerability in liens.php3 in liens_dynamiques 2.1 allows remote attackers to inject arbitrary web script or HTML by using the ajouter=1 query string and the add menu.
Max CVSS
6.8
EPSS Score
0.41%
Published
2007-01-18
Updated
2018-10-16
2 vulnerabilities found