Geodesicsolutions

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Geodesicsolutions records in CISA KEV

No Geodesicsolutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Geoauctions Enterprise 1 record LOW Geoauctions Premier 1 record LOW Geoclassifieds Basic 1 record LOW Geoclassifieds Enterprise 1 record LOW Geocore Max 1 record LOW

Records

4 records

TI-2014-03146 CVE-2014-3871 · GHSA-cj67-w5rj-88rh

Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX…

LOW 38

Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 (formerly GeoClassifieds and GeoAuctions) allow remote attackers to execute arbitrary SQL commands via the (1) c[password] or…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02555 Published 2014-05-27 No fix listed CWE-89

TI-2006-03710 CVE-2006-3823 · GHSA-4ch2-c55v-gqqf

SQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier…

LOW 27

SQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier 2.0.3 and (2) GeoClassifieds Basic 2.0.3 allows remote attackers to execute arbitrary SQL commands via the b parameter.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.01894 Published 2006-07-25 No fix listed CWE-89

TI-2006-03709 CVE-2006-3822 · GHSA-v8vg-c2fm-xqhq

SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise…

LOW 25

SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to execute arbitrary SQL commands via the d parameter.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.01027 Published 2006-07-25 No fix listed

TI-2006-06814 CVE-2006-7072 · GHSA-g3rc-62gf-xj23

Cross-site scripting (XSS) vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier…

LOW 24

Cross-site scripting (XSS) vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to inject arbitrary web script and HTML via the (1) b[username] and (2) c parameters to (a) index.php, the…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02292 Published 2007-02-27 No fix listed

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0