Duware

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

Duware records in CISA KEV

No Duware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Duclassified 5 records LOW Dupaypal 4 records LOW Duclassmate 3 records MEDIUM Dudirectory 3 records LOW Dudownload 3 records LOW Duforum 3 records LOW Dugallery 3 records LOW Dunews 3 records LOW

Records

4 records in Dupaypal · all components

TI-2006-06115 CVE-2006-6367 · GHSA-h3f8-qq4m-pp68

Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and…

LOW 36

Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) iFile or (2) action parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01595 Published 2006-12-07 No fix listed CWE-89

TI-2006-06113 CVE-2006-6365 · GHSA-j2c3-fc72-4vf3

SQL injection vulnerability in detail.asp in DUware DUpaypal 3.1, and possibly earlier…

LOW 36

SQL injection vulnerability in detail.asp in DUware DUpaypal 3.1, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the iType parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01444 Published 2006-12-07 No fix listed

TI-2006-06103 CVE-2006-6354 · GHSA-wvrv-cpq7-jg6v

Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote…

LOW 36

Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote attackers to execute arbitrary SQL commands via the (1) iNews, (2) iType, or (3) Action parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01689 Published 2006-12-07 No fix listed

TI-2005-03768 CVE-2005-3976 · GHSA-8cpm-2q4p-34xp

SQL injection vulnerability in type.asp, as used in multiple DUware products including…

LOW 35

SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2005-12-03 No fix listed

Open these records in search →

Critical	1
High	16
Medium	5
Low	0
No CVSS	0