Filtered by vendor Mldonkey
Subscribe
Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2009-0753 | 1 Mldonkey | 1 Mldonkey | 2024-11-21 | 5.0 MEDIUM | N/A |
Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files via a leading "//" (double slash) in the filename. | |||||
CVE-2007-4100 | 1 Mldonkey | 1 Mldonkey | 2024-11-21 | 5.0 MEDIUM | N/A |
MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/web_infos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist. | |||||
CVE-2003-1164 | 1 Mldonkey | 1 Mldonkey | 2024-11-20 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page. |