Read the docs

Classapps

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Classapps records in CISA KEV

No Classapps vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Selectsurvey.net 3 records MEDIUM

Records

3 records in Selectsurvey.net · all components

TI-2021-18332 CVE-2021-41609 · GHSA-jx6q-6477-j7q5

SQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of…

Priority MEDIUM 46

SQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve data from the application's backend database via bool…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02138 Published 2022-01-28 No fix listed CWE-89
TI-2021-18331 CVE-2021-41608 · GHSA-vwq3-p97g-f42v

A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of…

Priority LOW 37

A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the value of th…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01973 Published 2022-01-28 No fix listed CWE-639
TI-2014-04979 CVE-2014-6030 · GHSA-c584-9f95-jr3g

Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002…

Priority LOW 32

Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1) remote attackers to execute arbitrary SQL commands via the SurveyID parameter to survey/ReviewReadOnlySurvey.aspx or (2) rem…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01727 Published 2014-11-06 No fix listed CWE-89
Open these records in search →