Vulnerabilities > Telaen Project

DATE CVE VULNERABILITY TITLE RISK
2020-02-03 CVE-2013-2624 Information Exposure vulnerability in Telaen Project Telaen
Telean before 1.3.1 contains a full path disclosure vulnerability which could allow remote attackers to obtain sensitive information through a specially crafted URL request.
network
low complexity
telaen-project CWE-200
5.3
2020-02-03 CVE-2013-2623 Cross-site Scripting vulnerability in Telaen Project Telaen
Cross-site Scripting (XSS) in Telaen before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the "f_email" parameter in index.php.
network
low complexity
telaen-project CWE-79
6.1
2020-02-03 CVE-2013-2621 Open Redirect vulnerability in Telaen Project Telaen
Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websites via a crafted URL.
network
low complexity
telaen-project CWE-601
6.1