Coldgen

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Coldgen records in CISA KEV

No Coldgen vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Coldusergroup 2 records LOW Coldbookmarks 1 record LOW Coldcalendar 1 record LOW

Records

4 records

TI-2010-04639 CVE-2010-4916 · GHSA-h2wc-cvm7-46rm

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow…

LOW 35

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2011-10-08 No fix listed CWE-89

TI-2010-04638 CVE-2010-4915 · GHSA-whff-mwfj-4g3f

SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote…

LOW 35

SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the BookmarkID parameter in an EditBookmark action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2011-10-08 No fix listed CWE-89

TI-2010-04633 CVE-2010-4910 · GHSA-5gvm-9848-xhgq

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote…

LOW 35

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2011-10-08 No fix listed CWE-89

TI-2010-04636 CVE-2010-4913 · GHSA-3v9x-2fwv-w83q

Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup…

LOW 23

Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01528 Published 2011-10-08 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	1
Low	0
No CVSS	0