Read the docs

Absolutengine

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Absolutengine records in CISA KEV

No Absolutengine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Absolut Engine 2 records LOW

Records

2 records

TI-2014-07662 CVE-2014-9435 · GHSA-r9cx-xf3c-4pvx

Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated…

Priority LOW 31

Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL commands via the (1) sectionID parameter to admin/managersection.php, (2) userID parameter to admin/…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01123 Published 2015-01-02 No fix listed CWE-89
TI-2014-07661 CVE-2014-9434 · GHSA-x7gf-jp4q-fg8q

Cross-site scripting (XSS) vulnerability in admin/managerrelated.php in the…

Priority LOW 20

Cross-site scripting (XSS) vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.73 allows remote authenticated users to inject arbitrary web script or HTML via the title parameter.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01564 Published 2015-01-02 No fix listed CWE-79
Open these records in search →