Interact

Interact

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2008-2220

Exploit
  • EPSS 3.21%
  • Veröffentlicht 14.05.2008 18:20:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) CONFIG[LANGUAGE_CPATH] parameter...

4.3

CVE-2007-4177

  • EPSS 0.51%
  • Veröffentlicht 08.08.2007 01:17:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in Interact before 2.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2007-3328.

4.3

CVE-2007-3328

  • EPSS 0.99%
  • Veröffentlicht 21.06.2007 18:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) module_key parameter to (a) kb/kb.php, (b) quiz/runquiz.php, (c) quiz/quiz.php, (d) forum/forum.php, ...

2.6

CVE-2006-1642

  • EPSS 0.43%
  • Veröffentlicht 06.04.2006 10:04:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in Interact 2.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) the search_terms parameter to (a) search.php, and (2) the first_name, (3) last_name, (4) email, (5) password, and (6) co...

7.5

CVE-2006-1643

  • EPSS 0.62%
  • Veröffentlicht 06.04.2006 10:04:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

SQL injection vulnerability in login.php in Interact 2.1.1 allows remote attackers to execute arbitrary SQL commands via the user_name parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party.

5

CVE-2006-1644

  • EPSS 0.4%
  • Veröffentlicht 06.04.2006 10:04:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

login.php in Interact 2.1.1 generates different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames. NOTE: the provenance of this information is unknown; the details are obtained sole...