Andrew Freed

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Andrew Freed records in CISA KEV

No Andrew Freed vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Quotebook 2 records LOW

Records

2 records

TI-2009-00787 CVE-2009-0829 · GHSA-cxq6-6473-qf7m

Multiple SQL injection vulnerabilities in QuoteBook allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in QuoteBook allow remote attackers to execute arbitrary SQL commands via the (1) MyBox and (2) selectFavorites parameters to (a) quotes.php and the (3) QuoteName and (4) QuoteText…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00905 Published 2009-03-05 No fix listed CWE-89

TI-2009-00788 CVE-2009-0830 · GHSA-732f-w5mf-w62p

Cross-site scripting (XSS) vulnerability in QuoteBook allows remote attackers to inject…

LOW 22

Cross-site scripting (XSS) vulnerability in QuoteBook allows remote attackers to inject arbitrary web script or HTML via the (1) QuoteName and (2) QuoteText parameters to quotesadd.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00845 Published 2009-03-05 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0