Merlix

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Merlix records in CISA KEV

No Merlix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Educate Server 2 records LOW Teamworx Server 2 records LOW

Records

2 records in Teamworx Server · all components

TI-2008-05315 CVE-2008-5599 · GHSA-rrcc-w72w-2j8r

SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote…

LOW 35

SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the password parameter (aka passwd field) in a login action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-12-16 No fix listed CWE-89

TI-2008-05316 CVE-2008-5600 · GHSA-92mw-7x5v-6p5g

Merlix Teamworx Server stores sensitive information under the web root with insufficient…

LOW 28

Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for teamworx.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02615 Published 2008-12-16 No fix listed CWE-264

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0