Interchange Development Group

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Interchange Development Group records in CISA KEV

No Interchange Development Group vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Interchange 5 records MEDIUM

Records

5 records in Interchange · all components

TI-2008-02323 CVE-2008-2423 · GHSA-6767-f66w-767h

Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote…

MEDIUM 50

Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of service via crafted HTTP requests.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03969 Published 2008-05-23 No fix listed

TI-2007-02547 CVE-2007-2635 · GHSA-fq7c-87gr-rq4x

Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an…

LOW 39

Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service (possibly server hang) via crafted HTTP requests.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02346 Published 2007-05-13 No fix listed

TI-2005-02903 CVE-2005-3072 · GHSA-x8cp-8xjm-x5rm

SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0…

LOW 37

SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01919 Published 2005-09-27 No fix listed

TI-2004-00342 CVE-2004-0374 · GHSA-v6q8-f3pg-p46q

Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary…

LOW 34

Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02825 Published 2004-04-06 No fix listed

TI-2005-02904 CVE-2005-3073 · GHSA-xgc7-jmvj-5fph

Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2…

LOW 25

Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) "mike", (2) "standard", or (3) "foundation" demo, allows attackers to inject…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01307 Published 2005-09-27 No fix listed

Open these records in search →

Critical	1
High	2
Medium	2
Low	0
No CVSS	0