Vulnerabilities > Mldonkey

DATE CVE VULNERABILITY TITLE RISK
2009-03-03 CVE-2009-0753 Path Traversal vulnerability in Mldonkey
Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files via a leading "//" (double slash) in the filename.
network
low complexity
mldonkey CWE-22
5.0
2007-07-31 CVE-2007-4100 Unspecified vulnerability in Mldonkey
MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/web_infos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist.
network
low complexity
mldonkey
5.0
2003-12-31 CVE-2003-1164 Cross-Site Scripting vulnerability in Mldonkey 2.5.4
Cross-site scripting (XSS) vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page.
network
mldonkey
4.3