Exv2

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Exv2 records in CISA KEV

No Exv2 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Content Management System 6 records MEDIUM Exv2 5 records LOW Bamagalerie 1 record LOW

Records

5 records in Exv2 · all components

TI-2008-01298 CVE-2008-1349 · GHSA-vx63-36c8-v985

SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and…

LOW 35

SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01235 Published 2008-03-17 No fix listed CWE-89

TI-2008-01354 CVE-2008-1407 · GHSA-fpcf-5g8m-45v3

SQL injection vulnerability in index.php in the WebChat 1.60 module for eXV2 allows…

LOW 32

SQL injection vulnerability in index.php in the WebChat 1.60 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the roomid parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00914 Published 2008-03-20 No fix listed CWE-89

TI-2008-01353 CVE-2008-1406 · GHSA-27vc-vrhq-mf4c

SQL injection vulnerability in annonces-p-f.php in the MyAnnonces 1.8 module for eXV2…

LOW 32

SQL injection vulnerability in annonces-p-f.php in the MyAnnonces 1.8 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the lid parameter in an ImprAnn action.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00914 Published 2008-03-20 No fix listed CWE-89

TI-2008-01351 CVE-2008-1404 · GHSA-66wh-q6f2-g6mm

SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module…

LOW 32

SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the kid parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00914 Published 2008-03-20 No fix listed CWE-89

TI-2010-03910 CVE-2010-4155 · GHSA-j4jf-g93f-79pj

Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.10 allow remote…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the (1) rssfeedURL parameter to manual/caferss/example.php and the sumb parameter to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01068 Published 2010-11-03 No fix listed CWE-79

Open these records in search →

Critical	2
High	2
Medium	7
Low	0
No CVSS	0