← Back

Tux Racer

tux_racer

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Tuxbank
tuxbank

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Tux Racer
1Tuxbank
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in manage_account.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter in a manageaccount action to index.php.
1Tux Racer
1Tuxbank
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Tux Racer TuxBank 0.7x and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) description parameters.