Filtered by vendor Webtrees Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-22723 1 Webtrees 1 Webtrees 2025-01-21 4.9 Medium
Webtrees 2.1.18 is vulnerable to Directory Traversal. By manipulating the "media_folder" parameter in the URL, an attacker (in this case, an administrator) can navigate beyond the intended directory (the 'media/' directory) to access sensitive files in other parts of the application's file system.
CVE-2014-100006 1 Webtrees 1 Webtrees 2024-11-21 N/A
Multiple cross-site scripting (XSS) vulnerabilities in modules_v3/googlemap/wt_v3_street_view.php in webtrees before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) map, (2) streetview, or (3) reset parameter.