Apache2Triad vulnerabilities

3 vulnerabilities

Known vulnerabilities in Apache2Triad products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
6.1CVE-2017-12971apache2triadapache2triad
EPSS score
2.63%
Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the account parameter to phpsftpd/users.php.8.8CVE-2017-12970apache2triadapache2triad
EPSS score
2.22%
Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated users for requests that (1) add or (2) delete user accounts via a request to phpsftpd/users.php.9.8CVE-2017-12965apache2triadapache2triad
EPSS score
15.67%
Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter.