Outfront

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Outfront records in CISA KEV

No Outfront vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Spooky Login 3 records MEDIUM

Records

3 records in Spooky Login · all components

TI-2006-06604 CVE-2006-6861 · GHSA-8m3m-xj6p-x6fq

Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote…

MEDIUM 46

Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the UserUpdate parameter to login/register.asp or (2) unspecified parameters to include…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01463 Published 2007-01-04 No fix listed

TI-2002-01639 CVE-2002-1720 · GHSA-grhf-jvxv-chm6

SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to…

LOW 38

SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02675 Published 2005-06-21 No fix listed

TI-2006-06605 CVE-2006-6862 · GHSA-2jvj-8cfx-j4f9

Multiple cross-site scripting (XSS) vulnerabilities in Outfront Spooky Login 2.7 allow…

LOW 33

Multiple cross-site scripting (XSS) vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) login/login.asp or (2) login/register.asp.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01232 Published 2007-01-04 No fix listed

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0