Filtered by vendor Talkback
Subscriptions
Filtered by product Talkback
Subscriptions
Total
4 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2007-6105 | 1 Talkback | 1 Talkback | 2024-08-07 | N/A |
Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) language_file parameter to (a) comments-display-tpl.php and (b) addons/separate-comments-mod/my-comments-display-tpl.php and the (2) config[comments_form_tpl] parameter to comments-display-tpl.php. | ||||
CVE-2008-4346 | 1 Talkback | 1 Talkback | 2024-08-07 | N/A |
Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to comments.php, a different vector than CVE-2008-3371. | ||||
CVE-2008-4115 | 1 Talkback | 1 Talkback | 2024-08-07 | N/A |
TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function. | ||||
CVE-2008-3371 | 1 Talkback | 1 Talkback | 2024-08-07 | N/A |
Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter. |
Page 1 of 1.