← Back

Paolink

paolink

Vendor: Zenas • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-3423
1Zenas
1Paolink
Apr 23, 2026
Sep 25, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.
CVE-2009-3320
1Zenas
1Paolink
Apr 23, 2026
Sep 23, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.