| Max CVSS | 7.5 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-4115 | 5.0 |
TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function.
|
29-09-2017 - 01:32 | 16-09-2008 - 23:00 | |
| CVE-2008-4346 | 7.5 |
Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to comments.php, a different vector than CVE-2008-3371.
|
29-09-2017 - 01:32 | 30-09-2008 - 18:15 | |
| CVE-2008-3371 | 7.5 |
Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.
|
29-09-2017 - 01:31 | 30-07-2008 - 17:41 |