Vulnerabilities > Lokwa

DATE CVE VULNERABILITY TITLE RISK
2002-12-31 CVE-2002-1880 Remote Security vulnerability in Lokwa Lokwabb 1.2.2
LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php.
network
low complexity
lokwa
5.0
2002-12-31 CVE-2002-1879 SQL Injection vulnerability in Lokwa Lokwabb 1.2.1
SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the (1) member parameter to member.php or (2) loser parameter to misc.php.
network
low complexity
lokwa
7.5