Coldgen

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Coldgen records in CISA KEV

No Coldgen vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Coldusergroup 2 records LOW Coldbookmarks 1 record LOW Coldcalendar 1 record LOW

Records

2 records in Coldusergroup · all components

TI-2010-04639 CVE-2010-4916 · GHSA-h2wc-cvm7-46rm

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow…

LOW 35

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2011-10-08 No fix listed CWE-89

TI-2010-04636 CVE-2010-4913 · GHSA-3v9x-2fwv-w83q

Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup…

LOW 23

Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01528 Published 2011-10-08 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	1
Low	0
No CVSS	0