Manic Web

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Manic Web records in CISA KEV

No Manic Web vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mwnewsletter 3 records LOW Mwguest 1 record LOW

Records

3 records in Mwnewsletter · all components

TI-2006-01637 CVE-2006-1691 · GHSA-538h-fc8m-7vq8

SQL injection vulnerability in MWNewsletter 1.0.0b allows remote attackers to execute…

LOW 36

SQL injection vulnerability in MWNewsletter 1.0.0b allows remote attackers to execute arbitrary SQL commands via the user_name parameter to unsubscribe.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01447 Published 2006-04-11 No fix listed

TI-2006-01638 CVE-2006-1692 · GHSA-f3x8-96pm-f4wq

Multiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to execute arbitrary SQL commands via the (1) user_email parameter to (a) unsubscribe.php or (b) subscribe.php; or the (2) user_name pa…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2006-04-11 No fix listed

TI-2006-01636 CVE-2006-1690 · GHSA-vhpp-8h27-6vc3

Cross-site scripting (XSS) vulnerability in subscribe.php in MWNewsletter 1.0.0b allows…

LOW 33

Cross-site scripting (XSS) vulnerability in subscribe.php in MWNewsletter 1.0.0b allows remote attackers to inject arbitrary web script or HTML via the user_name parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0156 Published 2006-04-11 No fix listed

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0