Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2008-3868

Disclosure Date: November 03, 2008 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in Interact 2.4.1 allows remote attackers to hijack the authentication of super administrators for requests that create super administrator accounts.
0
0
Attacker Value
Unknown

CVE-2008-3867

Disclosure Date: November 03, 2008 (last updated October 04, 2023)
SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote attackers to execute arbitrary SQL commands via the email_user_key parameter.
0
0
Attacker Value
Unknown

CVE-2008-3384

Disclosure Date: July 30, 2008 (last updated October 04, 2023)
Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) module and (2) file parameters.
0
0
Attacker Value
Unknown

CVE-2008-2220

Disclosure Date: May 14, 2008 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) CONFIG[LANGUAGE_CPATH] parameter to modules/forum/embedforum.php and the (2) CONFIG[BASE_PATH] parameter to modules/scorm/lib.inc.php, different vectors than CVE-2006-4448.
0
0