scripts.oldguy talkback vulnerabilities

Latest scripts.oldguy talkback CVEs

Newest publication first

1. CVE-2009-4874 TalkBack 2.3.14 does not properly restrict access to the edit comment feature (comments.php), which allows remote attackers to modify comments.

   Published 2010-05-26

   Medium·CVSS 6.4 EPSS 2.6%

   TalkBack 2.3.14 does not properly restrict access to the edit comment feature (comments.php), which allows remote attackers to modify comments.

2. CVE-2009-4854 addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter.

   Published 2010-05-07

   High·CVSS 7.5 EPSS 3.1%

   addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.