Bananadance Banana Dance — known CVE vulnerabilities

Every CVE whose affected-product data names Bananadance Banana Dance, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2011-5168 — CVSS 7.5 (high): SQL injection vulnerability in user.php in Banana Dance before B.1.5 allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2011-5175 — CVSS 7.5 (high): SQL injection vulnerability in search.php in Banana Dance, possibly B.1.5 and earlier, allows remote attackers to execute arbitrary SQL…
• CVE-2012-5244 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the…
• CVE-2012-5242 — CVSS 6.8 (medium): Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to include and execute…
• CVE-2012-5243 — CVSS 5.0 (medium): functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information via a crafted…
• CVE-2011-5176 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in search.php in Banana Dance, possibly B.1.5 and earlier, allow remote attackers to…