Freereprintables » Articlefr : Security Vulnerabilities, CVEs,
Directory traversal vulnerability in application/templates/amelia/loadjs.php in Free Reprintables ArticleFR 3.0.7 and earlier allows local users to read arbitrary files via the s parameter.
Max CVSS
5.5
EPSS Score
0.04%
Published
2020-01-15
Updated
2020-01-16
Multiple cross-site request forgery (CSRF) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request to dashboard/users/create/.
Max CVSS
6.8
EPSS Score
0.14%
Published
2015-07-16
Updated
2015-07-21
Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to dashboard/settings/categories/, (2) title or (3) rel parameter to dashboard/settings/links/, or (4) url parameter to dashboard/tools/pingservers/.
Max CVSS
4.3
EPSS Score
0.43%
Published
2015-07-16
Updated
2015-07-21
SQL injection vulnerability in the getProfile function in system/profile.functions.php in Free Reprintables ArticleFR 3.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter to register/.
Max CVSS
7.5
EPSS Score
0.13%
Published
2015-01-27
Updated
2015-01-28
Cross-site scripting (XSS) vulnerability in Free Reprintables ArticleFR 3.0.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter to search/v/.
Max CVSS
4.3
EPSS Score
0.43%
Published
2015-01-27
Updated
2015-01-28
Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) get or (2) set action to rate.php.
Max CVSS
7.5
EPSS Score
0.09%
Published
2014-08-22
Updated
2018-10-09
A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restrictions in the data.php script, which could let a remote malicious user obtain access or modify or delete database information.
Max CVSS
9.8
EPSS Score
15.86%
Published
2020-02-13
Updated
2020-02-19
7 vulnerabilities found