Quirm

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Quirm records in CISA KEV

No Quirm vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Saxon 3 records LOW Espg 1 record LOW Simple Php Newsletter 1 record LOW Zenlite 1 record LOW

Records

3 records in Saxon · all components

TI-2007-04697 CVE-2007-4863 · GHSA-4xvw-fjx2-wmpv

SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to…

LOW 32

SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via the template parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0118 Published 2007-10-30 No fix listed CWE-89

TI-2007-04695 CVE-2007-4861 · GHSA-ggh7-8g84-pcwc

SAXON 5.4, with display_errors enabled, allows remote attackers to obtain sensitive…

LOW 26

SAXON 5.4, with display_errors enabled, allows remote attackers to obtain sensitive information via (1) a direct request for news.php, (2) an invalid use of a newsid array parameter to admin/edit-item.php, and possibly u…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01814 Published 2007-10-30 No fix listed CWE-200

TI-2007-04696 CVE-2007-4862 · GHSA-w9gf-3cjv-vfxp

Cross-site scripting (XSS) vulnerability in admin/menu.php in SAXON 5.4 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web script or HTML via the config[news_url] parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01849 Published 2007-10-30 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	5
Low	0
No CVSS	0