Ringsworld Flashlight Free Edition — known CVE vulnerabilities

Every CVE whose affected-product data names Ringsworld Flashlight Free Edition, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2009-4204 — CVSS 7.5 (high): SQL injection vulnerability in read.php in Flashlight Free Edition allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2009-4205 — CVSS 7.5 (high): Directory traversal vulnerability in admin.php in Flashlight Free Edition allows remote attackers to include and execute arbitrary local…