Rainworx

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Rainworx records in CISA KEV

No Rainworx vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rwauction Pro 2 records LOW Auctionworx 1 record LOW

Records

3 records

TI-2022-07886 CVE-2022-23904 · GHSA-vhxp-r6hh-hf7v

Rainworx Auctionworx < 3.1R2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack…

LOW 35

Rainworx Auctionworx < 3.1R2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack that allows an authenticated user to upgrade his account to admin and gain access to the auctionworx admin control panel.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00452 Published 2022-05-02 No fix listed CWE-352

TI-2005-03850 CVE-2005-4060 · GHSA-7h5c-jffx-gp3w

Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0…

LOW 24

Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02037 Published 2005-12-07 No fix listed CWE-79

TI-2007-03433 CVE-2007-3540 · GHSA-95fv-8qj3-cq4r

Multiple cross-site scripting (XSS) vulnerabilities in search.asp in rwAuction Pro 5.0…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in search.asp in rwAuction Pro 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) show, (3) searchtype, (4) catid, and (5) search…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2007-07-03 No fix listed

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0