shoutpro records
2 published records for vendor shoutpro.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
44Plan | CVE-2007-2141Proof of concept | Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shoutshoutpro · shoutpro | High7.5 | — | 45.8% | Apr 19, 2007 |
21Monitor | CVE-2006-7047No exploit | include.php in Shoutpro 1.0 might allow remote attackers to bypass IP ban restrictions via a URL in the path parameter that points to an altshoutpro · shoutpro · CWE-264 | Medium5.0 | — | 2.5% | Feb 23, 2007 |
- CVE-2007-214144Plan
Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shout
HighCVSS 7.5Proof of conceptEPSS 45%shoutpro · shoutproApr 19, 2007
- CVE-2006-704721Monitor
include.php in Shoutpro 1.0 might allow remote attackers to bypass IP ban restrictions via a URL in the path parameter that points to an alt
MediumCVSS 5.0No exploitEPSS 2%shoutpro · shoutproFeb 23, 2007