ej3 records
7 published records for vendor ej3.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2006-3536No exploit | Direct static code injection vulnerability in code/class_db_text.php in EJ3 TOPo 2.2.178 and earlier allows remote attackers to execute arbiej3 · topo | High7.5 | — | 1.5% | Jul 12, 2006 |
21Monitor | CVE-2003-1409Proof of concept | TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter to (1) in.php or (2) ej3 · topo · CWE-200 | Medium5.0 | — | 2.5% | Dec 31, 2003 |
20Monitor | CVE-2005-1716No exploit | TOPo 2.2 (2.2.178) stores data files in the data directory under the web document root with insufficient access control, which allows remoteej3 · topo | Medium5.0 | — | 1.5% | May 24, 2005 |
20Monitor | CVE-2006-3833No exploit | index.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish new passwords for the overwritten entries ej3 · topo | Medium5.0 | — | 1.4% | Jul 25, 2006 |
20Monitor | CVE-2006-3834No exploit | EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry pej3 · topo | Medium5.0 | — | 1.0% | Jul 25, 2006 |
18Monitor | CVE-2006-0984Proof of concept | Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTMej3 · topo | Medium4.3 | — | 2.0% | Mar 3, 2006 |
18Monitor | CVE-2005-1715Proof of concept | Cross-site scripting (XSS) vulnerability in index.php for TOPo 2.2 (2.2.178) allows remote attackers to inject arbitrary web script or HTML ej3 · topo | Medium4.3 | — | 2.0% | May 24, 2005 |
- CVE-2006-353630Monitor
Direct static code injection vulnerability in code/class_db_text.php in EJ3 TOPo 2.2.178 and earlier allows remote attackers to execute arbi
HighCVSS 7.5No exploitEPSS 2%ej3 · topoJul 12, 2006
- CVE-2003-140921Monitor
TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter to (1) in.php or (2)
MediumCVSS 5.0Proof of conceptEPSS 3%ej3 · topoDec 31, 2003
- CVE-2005-171620Monitor
TOPo 2.2 (2.2.178) stores data files in the data directory under the web document root with insufficient access control, which allows remote
MediumCVSS 5.0No exploitEPSS 2%ej3 · topoMay 24, 2005
- CVE-2006-383320Monitor
index.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish new passwords for the overwritten entries
MediumCVSS 5.0No exploitEPSS 1%ej3 · topoJul 25, 2006
- CVE-2006-383420Monitor
EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry p
MediumCVSS 5.0No exploitEPSS 1%ej3 · topoJul 25, 2006
- CVE-2006-098418Monitor
Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTM
MediumCVSS 4.3Proof of conceptEPSS 2%ej3 · topoMar 3, 2006
- CVE-2005-171518Monitor
Cross-site scripting (XSS) vulnerability in index.php for TOPo 2.2 (2.2.178) allows remote attackers to inject arbitrary web script or HTML
MediumCVSS 4.3Proof of conceptEPSS 2%ej3 · topoMay 24, 2005