Collector

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Collector records in CISA KEV

No Collector vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mycolex 3 records LOW Mygesuad 3 records LOW

Records

3 records in Mygesuad · all components

TI-2009-01738 CVE-2009-1826 · GHSA-rx66-2x9p-mvq8

modules/admuser.php in myGesuad 0.9.14 (aka 0.9) does not require administrative…

LOW 33

modules/admuser.php in myGesuad 0.9.14 (aka 0.9) does not require administrative authentication, which allows remote authenticated users to list user accounts via a Find action.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02086 Published 2009-05-29 No fix listed CWE-287

TI-2009-01724 CVE-2009-1812 · GHSA-w8v2-fvpp-q547

Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote…

LOW 29

Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to execute arbitrary SQL commands via (1) the formUser parameter (aka the Name field) to common/login.php, and allow remote authe…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00886 Published 2009-05-29 No fix listed CWE-89

TI-2009-01723 CVE-2009-1811 · GHSA-4jmj-j53j-vqfv

Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbitrary web script or HTML via (1) the Page parameter in a List action to modules/ereignis.php, (2) the…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01484 Published 2009-05-29 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	6
Low	0
No CVSS	0