Vulnerabilities > Radscripts > Radlance

DATE CVE VULNERABILITY TITLE RISK
2010-03-10 CVE-2009-4695 SQL Injection vulnerability in Radscripts Radlance 7.5
SQL injection vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a view_forum action.
network
low complexity
radscripts CWE-89
7.5
2010-03-10 CVE-2009-4694 Cross-Site Scripting vulnerability in Radscripts Radlance 7.5
Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the fid parameter in a view_forum action.
network
radscripts CWE-79
4.3
2010-03-10 CVE-2009-4692 Cross-Site Scripting vulnerability in Radscripts Radlance 7.5
Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the pr parameter in a ulist action.
network
radscripts CWE-79
4.3
2006-05-16 CVE-2006-2404 Local File Include vulnerability in Radscripts Radlance 7.0
Directory traversal vulnerability in popup.php in RadScripts RadLance Gold 7.0 allows remote attackers to read arbitrary files via a ..
network
low complexity
radscripts
6.4