Nodstrum

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Nodstrum records in CISA KEV

No Nodstrum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mysql Calendar 2 records LOW

Records

2 records

TI-2008-05446 CVE-2008-5738 · GHSA-gmv7-cm23-wj83

Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and…

LOW 38

Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02554 Published 2008-12-26 No fix listed CWE-264

TI-2008-05445 CVE-2008-5737 · GHSA-rhhp-2wh8-92m3

SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows…

LOW 35

SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01175 Published 2008-12-26 No fix listed CWE-89

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0