Injader

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Injader records in CISA KEV

No Injader vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Injader 3 records LOW

Records

3 records in Injader · all components

TI-2008-05586 CVE-2008-5890 · GHSA-h3p2-p62v-cpmr

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers…

LOW 35

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01029 Published 2009-01-12 No fix listed CWE-89

TI-2010-04236 CVE-2010-4505 · GHSA-w9cm-7f3g-v335

Multiple SQL injection vulnerabilities in login.php in Injader 2.4.4, when…

LOW 32

Multiple SQL injection vulnerabilities in login.php in Injader 2.4.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) un and (2) pw parameters.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00973 Published 2010-12-08 No fix listed CWE-89

TI-2008-05587 CVE-2008-5891 · GHSA-8j33-7wqq-q3wh

Cross-site scripting (XSS) vulnerability in the profile editing functionality in Injader…

LOW 23

Cross-site scripting (XSS) vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01497 Published 2009-01-12 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0