gantty records
2 published records for vendor gantty.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
20Monitor | CVE-2006-2893No exploit | index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang parameter in an authenticategantty · gantty | Medium5.0 | 1.6%Jun 7, 2006 |
18Monitor | CVE-2006-2892Proof of concept | Cross-site scripting (XSS) vulnerability in index.php in GANTTy 1.0.3 allows remote attackers to inject arbitrary HTML and web script via thgantty · gantty | Medium4.3 | 3.8%Jun 7, 2006 |
- CVE-2006-289320Monitor
index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang parameter in an authenticate
MediumCVSS 5.0No exploitEPSS 1%gantty · ganttyJun 7, 2006
- CVE-2006-289218Monitor
Cross-site scripting (XSS) vulnerability in index.php in GANTTy 1.0.3 allows remote attackers to inject arbitrary HTML and web script via th
MediumCVSS 4.3Proof of conceptEPSS 3%gantty · ganttyJun 7, 2006