Vendors / Maarch Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now Maarch records in CISA KEV No Maarch vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 62
Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension,…
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.43171 · Published 2015-02-19 · No fix listed
Priority LOW 27
SQL injection vulnerability in Maarch LetterBox 2.8 allows remote attackers to execute arbitrary SQL commands via the UserId cookie.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02217 · Published 2014-11-20 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
Critical1 High3 Medium4 Low0 No CVSS0