Directtopics : Security Vulnerabilities, CVEs,
Cross-site scripting (XSS) vulnerability in DirectTopics 2.1 and 2.2 allows remote attackers to inject arbitrary web script via a javascript: URL in (1) a thread or (2) an IMG tag.
Max CVSS
4.3
EPSS Score
0.14%
Published
2005-05-14
Updated
2016-10-18
topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to obtain sensitive information via an invalid topic parameter, which reveals the path in an error message.
Max CVSS
5.0
EPSS Score
0.44%
Published
2005-05-12
Updated
2016-10-18
SQL injection vulnerability in topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter.
Max CVSS
7.5
EPSS Score
0.15%
Published
2005-05-12
Updated
2016-10-18
3 vulnerabilities found