Energine

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Energine records in CISA KEV

No Energine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Energine 2 records LOW

Records

2 records

TI-2010-03939 CVE-2010-4185 · GHSA-qfh4-2jgc-5v7g

SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows…

LOW 35

SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the NRGNSID cookie.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2010-11-05 No fix listed CWE-89

TI-2011-03291 CVE-2011-3734 · GHSA-xx7w-8884-5pcq

Energine 2.3.8 allows remote attackers to obtain sensitive information via a direct…

LOW 26

Energine 2.3.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by core/framework/SimpleBuilder.class.p…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0