Cds Software Consortium: Security Vulnerabilities
CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID.
CVSS Score
3.5
EPSS Score
0.005
Published
2008-04-02
PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AGE parameter.
CVSS Score
7.5
EPSS Score
0.069
Published
2006-10-18