Twig Development Team Twig — known CVE vulnerabilities

Every CVE whose affected-product data names Twig Development Team Twig, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2000-1166 — CVSS 7.5 (high): Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remote attackers to…
• CVE-2001-1348 — CVSS 7.5 (high): TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.
• CVE-2001-1361 — CVSS 7.5 (high): Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the generation of mailto…