Cactusoft

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Cactusoft records in CISA KEV

No Cactusoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cactushop 4 records LOW Parodia 3 records LOW Cactushop Lite 1 record LOW

Records

3 records in Parodia · all components

TI-2006-00975 CVE-2006-1005 · GHSA-fv57-vvhh-h7rj

agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain…

LOW 31

agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AG_ID parameter.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01207 Published 2006-03-06 No fix listed

TI-2007-02728 CVE-2007-2818 · GHSA-5fh4-xfhx-rv3x

Cross-site scripting (XSS) vulnerability in cand_login.asp in CactuSoft Parodia 6.4 and…

LOW 22

Cross-site scripting (XSS) vulnerability in cand_login.asp in CactuSoft Parodia 6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the strJobIDs parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01169 Published 2007-05-22 No fix listed

TI-2006-00974 CVE-2006-1004 · GHSA-4chf-vr3j-cg52

Cross-site scripting (XSS) vulnerability in agencyprofile.asp in Parodia 6.2 and earlier…

LOW 22

Cross-site scripting (XSS) vulnerability in agencyprofile.asp in Parodia 6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the AG_ID parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2006-03-06 No fix listed

Open these records in search →

Critical	0
High	3
Medium	5
Low	0
No CVSS	0