Read the docs

ARK-Web co., ltd.

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

ARK-Web co., ltd. records in CISA KEV

No ARK-Web co., ltd. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
A-form 2 records LOW A-form Pc 2 records LOW A-form Pc Mobile 2 records LOW A-form Bamboo 1 record LOW A-member 1 record MEDIUM A-reserve 1 record MEDIUM

Records

5 records

TI-2017-07988 CVE-2017-10899 · GHSA-332f-6793-cv8m

SQL injection in Princeton Ltd. A-Reserve

Priority MEDIUM 45

SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01269 Published 2017-12-01 No fix listed CWE-89
TI-2017-07987 CVE-2017-10898 · GHSA-mrg9-mxp8-4hm6

SQL injection in Princeton Ltd. A-Member

Priority MEDIUM 45

SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01269 Published 2017-12-01 No fix listed CWE-89
TI-2022-18365 CVE-2022-38972 · GHSA-qx7m-g7vm-qw2r

Cross-site scripting in ARK-Web co., ltd. A-Form

Priority LOW 29

Cross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for Movable Type 7 Series) and versions prior to 3.9.1 (for Movable Type 6 Series) allows a remote unauthenticated attacker to inj…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00975 Published 2022-09-12 No fix listed CWE-79
TI-2011-02337 CVE-2011-2676 · GHSA-mxcv-w3x2-ccgv

The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and…

Priority LOW 27

The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to m…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01263 Published 2011-11-03 No fix listed CWE-287
TI-2011-03741 CVE-2011-4274 · GHSA-mqv5-xgm5-g729

Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerabili…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01042 Published 2011-11-03 No fix listed CWE-79
Open these records in search →