Wired Community Software Wwwthreads — known CVE vulnerabilities

Every CVE whose affected-product data names Wired Community Software Wwwthreads, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2000-0125 — CVSS 7.5 (high): wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain…
• CVE-2002-0223 — CVSS 7.5 (high): Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by…
• CVE-2006-3909 — CVSS 6.8 (medium): Cross-site scripting (XSS) vulnerability in calendar.php in WWWthreads allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2006-1958 — CVSS 6.4 (medium): Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via (1) the…
• CVE-2006-5059 — CVSS 5.1 (medium): Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script…