Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
I-rater records in CISA KEVNo I-rater vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 35
SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.00973 · Published 2009-02-02 · No fix listed CWE-89
Open these records in search →