Skip to content
Noroxi

citrusdb records

5 published records for vendor citrusdb.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    5 records
    • CVE-2005-0408
      40Plan

      CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to

      CriticalCVSS 9.8Proof of conceptEPSS 4%

      citrusdb · citrusdbFeb 14, 2005

    • CVE-2005-0411
      31Monitor

      Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary P

      HighCVSS 7.5Proof of conceptEPSS 2%

      citrusdb · citrusdbFeb 14, 2005

    • CVE-2005-0409
      27Monitor

      CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upl

      MediumCVSS 6.4Proof of conceptEPSS 5%

      citrusdb · citrusdbFeb 14, 2005

    • CVE-2005-0229
      22Monitor

      CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card

      MediumCVSS 5.0Proof of conceptEPSS 7%

      citrusdb · citrusdb customer databaseApr 27, 2005

    • CVE-2005-0410
      21Monitor

      SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV fi

      MediumCVSS 5.0Proof of conceptEPSS 1%

      citrusdb · citrusdbFeb 14, 2005