Opentools Attachment Mod — known CVE vulnerabilities

Every CVE whose affected-product data names Opentools Attachment Mod, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2004-1404 — CVSS 7.5 (high): Attachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, does not properly handle files with multiple file extensions, such…
• CVE-2005-1630 — CVSS 7.5 (high): Unknown vulnerability in Attachment Mod before 2.3.13, related to a "serious issue with realnames," has unknown impact and attack vectors.
• CVE-2004-1399 — CVSS 5.0 (medium): Directory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB allows remote attackers to read arbitrary files via…
• CVE-2006-7073 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Opentools Attachment Mod before 2.4.5 allows remote attackers to inject arbitrary web script or…