Zeeways Zeeproperty vulnerabilities
2 known vulnerabilities affecting zeeways/zeeproperty.
Total CVEs
2
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2008-6914P3MEDIUMCVSS 6.5PoCv1.02009-08-07
CVE-2008-6914 [MEDIUM] CWE-264 CVE-2008-6914: Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote a
Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile modification, then accessing a related file via a direct request to the file in companylogo/.
nvd
CVE-2008-6915P4MEDIUMCVSS 4.3PoCv1.02009-08-07
CVE-2008-6915 [MEDIUM] CWE-79 CVE-2008-6915: Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows
Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to inject arbitrary web script or HTML via the propid parameter.
nvd