Vulnerabilities > Dflabs > PTK > 1.0.3

DATE CVE VULNERABILITY TITLE RISK
2009-03-16 CVE-2009-0918 Remote Security vulnerability in PTK
Multiple unspecified vulnerabilities in DFLabs PTK 1.0.0 through 1.0.4 allow remote attackers to execute arbitrary commands in processes launched by PTK's Apache HTTP Server via (1) "external tools" or (2) a crafted forensic image.
network
low complexity
dflabs
7.5
2009-03-16 CVE-2009-0917 Cross-Site Scripting vulnerability in Dflabs PTK
Cross-site scripting (XSS) vulnerability in DFLabs PTK 1.0.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML by providing a forensic image containing HTML documents, which are rendered in web browsers during inspection by PTK.
network
dflabs CWE-79
4.3