Almondsoft

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Almondsoft records in CISA KEV

No Almondsoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Almond Classifieds 5 records LOW Affiliate Network Classifieds 2 records LOW Com Aclassf 2 records LOW Almond Personals 1 record LOW

Records

5 records in Almond Classifieds · all components

TI-2009-03071 CVE-2009-3226 · GHSA-5r4q-84cw-cpwc

SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise…

LOW 35

SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to execute arbitrary SQL commands via the replid parameter in a ma…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01133 Published 2009-09-16 No fix listed CWE-89

TI-2009-02453 CVE-2009-2567 · GHSA-q8f5-jfgc-wgv5

SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 5.6.2 for…

LOW 35

SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 5.6.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00907 Published 2009-07-22 No fix listed CWE-89

TI-2005-03535 CVE-2005-3741 · GHSA-q7cm-hp8h-fqvw

Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions.

LOW 35

Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01146 Published 2005-11-22 No fix listed

TI-2009-03070 CVE-2009-3225 · GHSA-88g5-782g-r7xp

Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web script or HTML via (1) t…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01511 Published 2009-09-16 No fix listed CWE-79

TI-2009-03072 CVE-2009-3227 · GHSA-x3c4-8cgr-5j45

Cross-site scripting (XSS) vulnerability in index.php in AlmondSoft Almond Classifieds…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to inject arbitrary web script or HTML via the city p…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01097 Published 2009-09-16 No fix listed CWE-79

Open these records in search →

Critical	0
High	5
Medium	3
Low	0
No CVSS	0