Magnoware

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Magnoware records in CISA KEV

No Magnoware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Datatrack System 3 records LOW

Records

3 records in Datatrack System · all components

TI-2010-01992 CVE-2010-2079 · GHSA-crgx-9757-wppq

DataTrack System 3.5 allows remote attackers to bypass intended restrictions on file…

LOW 26

DataTrack System 3.5 allows remote attackers to bypass intended restrictions on file extensions, and read arbitrary files, via a trailing backslash in a URI, as demonstrated by (1) web.config\ and (2) .ascx\ files.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01397 Published 2010-05-25 No fix listed CWE-20

TI-2010-01991 CVE-2010-2078 · GHSA-r3rv-6724-59xh

DataTrack System 3.5 allows remote attackers to list the root directory via a (1) /%u0085/ or (2) /%u00A0/ URI.

LOW 26

DataTrack System 3.5 allows remote attackers to list the root directory via a (1) /%u0085/ or (2) /%u00A0/ URI.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01318 Published 2010-05-25 No fix listed CWE-20

TI-2010-01959 CVE-2010-2043 · GHSA-mrhj-qvw9-qpwx

Cross-site scripting (XSS) vulnerability in Home.aspx in DataTrack System 3.5 and…

LOW 23

Cross-site scripting (XSS) vulnerability in Home.aspx in DataTrack System 3.5 and 3.5.8019.4 allows remote attackers to inject arbitrary web script or HTML via the Work_Order_Summary parameter (aka the request summary).

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01272 Published 2010-05-25 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0