← Back

Webpals

webpals

Vendor: Mnscu Pals • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Mnscu Pals
1Webpals
Apr 16, 2026
Jun 2, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the documentName parameter.
1Mnscu Pals
1Webpals
Apr 16, 2026
Jun 2, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName parameter.