CVE Tools
Track your stack

Interact

6 CVEs tracked since 2006. Since Apr 2006, none of them reached CISA KEV.

Interact CVEs per month

Apr 2006 to May 2008. Point at a month, or focus the strip and use the arrow keys.
Interact CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2006-0430
2006-05null or fewer
2006-06null or fewer
2006-07null or fewer
2006-08null or fewer
2006-09null or fewer
2006-10null or fewer
2006-11null or fewer
2006-12null or fewer
2007-01null or fewer
2007-02null or fewer
2007-03null or fewer
2007-04null or fewer
2007-05null or fewer
2007-0610
2007-07null or fewer
2007-0810
2007-09null or fewer
2007-10null or fewer
2007-11null or fewer
2007-12null or fewer
2008-01null or fewer
2008-02null or fewer
2008-03null or fewer
2008-04null or fewer
2008-0510

Products

The products that kept showing up in Interact's monthly top three, with their CVEs summed over those months.

  1. Interact64 months

Latest CVEs

The 6 most recently published vulnerabilities affecting Interact.

  1. CVE-2008-2220Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code ...6.8
  2. CVE-2007-4177Multiple cross-site scripting (XSS) vulnerabilities in Interact before 2.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2007-...4.3
  3. CVE-2007-3328Multiple cross-site scripting (XSS) vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) module_key parameter to (a) kb/kb.php, (b) quiz/...4.3
  4. CVE-2006-1643SQL injection vulnerability in login.php in Interact 2.1.1 allows remote attackers to execute arbitrary SQL commands via the user_name parameter. NOTE: the provenance of this information is unknow...7.5
  5. CVE-2006-1644login.php in Interact 2.1.1 generates different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames. NOTE: the provenance of this ...5.0
  6. CVE-2006-1642Cross-site scripting (XSS) vulnerability in Interact 2.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) the search_terms parameter to (a) search.php, and (2) the first_nam...2.6

The record

Peak rank
#40 in Apr 2006
Busiest month shown
Apr 2006, 3 CVEs
Months with a KEV entry
0 since Apr 2006
Monthly snapshots
4 since 2006
Interact's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store