Smeweb

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Smeweb records in CISA KEV

No Smeweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Smeweb 2 records LOW

Records

2 records

TI-2008-02542 CVE-2008-2652 · GHSA-j5v6-h83f-h9j9

Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow…

LOW 35

Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow remote attackers to execute arbitrary SQL commands via the (1) idp and (2) category parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-06-10 No fix listed CWE-89

TI-2008-02534 CVE-2008-2644 · GHSA-pcr6-jw4p-x349

Multiple cross-site scripting (XSS) vulnerabilities in SMEWeb 1.4b and 1.4f allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary web script or HTML via the (1) data parameter to catalog.php, the (2) keyword parameter to search.php…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01571 Published 2008-06-10 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0