Snoopy Project maintains a command-line logging and monitoring utility with a focused product scope, where observed vulnerabilities center on input-validation and OS command-injection weaknesses characteristic of tools that parse and execute system commands. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Snoopy Project over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2005-3330HIGH The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary comma | Oct 27, 2005 | 7.5 | 41 | NO | YES |
CVE-2008-4796HIGH The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, a | Oct 30, 2008 | 10.0 | 36 | NO | NO |
CVE-2014-5009CRITICAL Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008. | Mar 31, 2017 | 9.8 | 34 | NO | NO |
CVE-2008-7313CRITICAL The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796. | Mar 31, 2017 | 9.8 | 34 | NO | NO |
CVE-2002-2444CRITICAL Snoopy before 2.0.0 has a security hole in exec cURL | Oct 28, 2019 | 9.8 | 32 | NO | NO |
CVE-2014-5008CRITICAL Snoopy allows remote attackers to execute arbitrary commands. | Mar 31, 2017 | 9.8 | 32 | NO | NO |
CVE-2009-0502MEDIUM Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 | Feb 10, 2009 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Snoopy Project.
Media articles that mention a CVE ID that affects a product developed by Snoopy Project — matched by CVE ID, not by vendor name.