Duware

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

Duware records in CISA KEV

No Duware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Duclassified 5 records LOW Dupaypal 4 records LOW Duclassmate 3 records MEDIUM Dudirectory 3 records LOW Dudownload 3 records LOW Duforum 3 records LOW Dugallery 3 records LOW Dunews 3 records LOW

Records

3 records in Duclassmate · all components

TI-2006-06104 CVE-2006-6355 · GHSA-2h52-qv92-fqx2

SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers…

MEDIUM 47

SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL commands via the iCity parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01874 Published 2006-12-07 No fix listed

TI-2005-01937 CVE-2005-2049 · GHSA-77qf-7v4v-3v74

Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers…

LOW 37

Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) iState parameter to default.asp or (2) iPro parameter to edit.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02411 Published 2005-06-22 No fix listed

TI-2004-02070 CVE-2004-2198 · GHSA-ppq9-7r27-4m7g

account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the…

LOW 37

account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the "My Account" page.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.06077 Published 2005-07-10 No fix listed

Open these records in search →

Critical	1
High	16
Medium	5
Low	0
No CVSS	0