The 2z Project maintains a focused web application with a vulnerability profile centered on its namesake product and recurring around information-disclosure and application-layer input-handling weaknesses, including sensitive-data exposure, cross-site scripting, and SQL injection. Treat this as a niche vendor footprint rather than a broad pattern; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by 2z Project over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-2898HIGH SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php. | May 30, 2007 | 7.5 | 19 | NO | NO |
CVE-2007-2905HIGH SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the post_id parameter. NOTE: the provenance of | May 30, 2007 | 7.5 | 19 | NO | NO |
CVE-2007-6661MEDIUM 2z project 0.9.6.1 allows attackers to change the password without supplying the old password. | Jan 4, 2008 | 6.4 | 17 | NO | NO |
CVE-2007-6660MEDIUM 2z project 0.9.6.1 allows remote attackers to obtain sensitive information via (1) a request to index.php with an invalid template or (2) a request to the default URI with certain | Jan 4, 2008 | 5.0 | 15 | NO | NO |
CVE-2007-6659MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in 2z project 0.9.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) contentshort or (2) contentfull | Jan 4, 2008 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by 2z Project.
Media articles that mention a CVE ID that affects a product developed by 2z Project — matched by CVE ID, not by vendor name.