mountaingrafix

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

mountaingrafix records in CISA KEV

No mountaingrafix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Easylink 1 record LOW Easytrade 1 record LOW

Records

3 records

TI-2008-06161 CVE-2008-6471 · GHSA-vcmj-3jxm-63qf

SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote…

LOW 35

SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a show action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2009-03-13 No fix listed CWE-89

TI-2008-02665 CVE-2008-2790 · GHSA-2hcm-f2ff-9x8w

SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote…

LOW 35

SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01061 Published 2008-06-20 No fix listed CWE-89

TI-2025-12694 CVE-2025-13892 · GHSA-gfjh-r2j2-6qf3

MG AdvancedOptions <= 1.2 - Reflected Cross-Site Scripting

LOW 27

The MG AdvancedOptions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` variable in all versions up to, and including, 1.2 due to insufficient input sanitization and out…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00291 Published 2026-01-09 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0