Airvae

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Airvae records in CISA KEV

No Airvae vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Commerce · all components

TI-2008-04974 CVE-2008-5223 · GHSA-g6fr-wp8r-jpvw

LOW 35

SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-11-25 No fix listed CWE-89