peterselie records
6 published records for vendor peterselie.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-264 Permissions, Privileges, and Access Controls3
- CWE-20 Improper Input Validation1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2008-6772Proof of concept | login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which alpeterselie · yourplace · CWE-20 | High7.5 | — | 2.3% | Apr 29, 2009 |
27Monitor | CVE-2008-6773Proof of concept | Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authenticated users to exepeterselie · yourplace · CWE-94 | Medium6.5 | — | 1.9% | Apr 29, 2009 |
25Monitor | CVE-2008-6769Proof of concept | Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary cpeterselie · yourplace | Medium6.0 | — | 4.9% | Apr 29, 2009 |
22Monitor | CVE-2008-6770Proof of concept | YourPlace 1.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers peterselie · yourplace · CWE-264 | Medium5.0 | — | 5.9% | Apr 29, 2009 |
22Monitor | CVE-2008-6771Proof of concept | YourPlace 1.0.2 and earlier allows remote attackers to obtain sensitive system information via a direct request via a direct request to userpeterselie · yourplace · CWE-264 | Medium5.0 | — | 5.9% | Apr 29, 2009 |
21Monitor | CVE-2008-6774No exploit | internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end execution when an invalid username is detected, which allows remote attpeterselie · yourplace · CWE-264 | Medium5.0 | — | 1.9% | Apr 29, 2009 |
- CVE-2008-677231Monitor
login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which al
HighCVSS 7.5Proof of conceptEPSS 2%peterselie · yourplaceApr 29, 2009
- CVE-2008-677327Monitor
Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authenticated users to exe
MediumCVSS 6.5Proof of conceptEPSS 1%peterselie · yourplaceApr 29, 2009
- CVE-2008-676925Monitor
Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary c
MediumCVSS 6.0Proof of conceptEPSS 4%peterselie · yourplaceApr 29, 2009
- CVE-2008-677022Monitor
YourPlace 1.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers
MediumCVSS 5.0Proof of conceptEPSS 5%peterselie · yourplaceApr 29, 2009
- CVE-2008-677122Monitor
YourPlace 1.0.2 and earlier allows remote attackers to obtain sensitive system information via a direct request via a direct request to user
MediumCVSS 5.0Proof of conceptEPSS 5%peterselie · yourplaceApr 29, 2009
- CVE-2008-677421Monitor
internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end execution when an invalid username is detected, which allows remote att
MediumCVSS 5.0No exploitEPSS 1%peterselie · yourplaceApr 29, 2009