Vulnerabilities > Interact > Interact > 2.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2006-04-06 | CVE-2006-1644 | Remote Security vulnerability in Interact login.php in Interact 2.1.1 generates different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames. | 5.0 |
2006-04-06 | CVE-2006-1643 | Remote vulnerability in Interact SQL injection vulnerability in login.php in Interact 2.1.1 allows remote attackers to execute arbitrary SQL commands via the user_name parameter. | 7.5 |
2006-04-06 | CVE-2006-1642 | Cross-Site Scripting vulnerability in Interact Cross-site scripting (XSS) vulnerability in Interact 2.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) the search_terms parameter to (a) search.php, and (2) the first_name, (3) last_name, (4) email, (5) password, and (6) confirm_password parameters to (b) userinput.php. | 2.6 |