Iexpress

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Iexpress records in CISA KEV

No Iexpress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Estate Agent Manager 1 record LOW Munch Pro 1 record LOW Property Pro 1 record LOW

Records

3 records

TI-2006-05717 CVE-2006-5934 · GHSA-35xr-qxrc-6m3x

SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier…

LOW 36

SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the UserName field.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01317 Published 2006-11-16 No fix listed

TI-2007-03869 CVE-2007-3992 · GHSA-4332-wp3g-6j7g

SQL injection vulnerability in vir_login.asp in iExpress Property Pro allows remote…

LOW 35

SQL injection vulnerability in vir_login.asp in iExpress Property Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01013 Published 2007-07-25 No fix listed

TI-2007-03843 CVE-2007-3966 · GHSA-r24g-2v7x-vg9j

SQL injection vulnerability in Munch Pro allows remote attackers to execute arbitrary SQL…

LOW 25

SQL injection vulnerability in Munch Pro allows remote attackers to execute arbitrary SQL commands via the login field to /admin, a different vulnerability than CVE-2006-5880.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01045 Published 2007-07-25 No fix listed

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0