Thinkfactory

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Thinkfactory records in CISA KEV

No Thinkfactory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ultimate Estate 3 records LOW Thinkwms 1 record LOW Ultimate Eshop 1 record LOW Ultimategoogle 1 record LOW

Records

3 records in Ultimate Estate · all components

TI-2006-03054 CVE-2006-3154 · GHSA-fxjc-hg47-q982

SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote…

LOW 36

SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01381 Published 2006-06-22 No fix listed

TI-2006-03053 CVE-2006-3153 · GHSA-8g96-648w-5qjc

Cross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier…

LOW 23

Cross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01299 Published 2006-06-22 No fix listed

TI-2006-03055 CVE-2006-3155 · GHSA-58xw-73v9-qpg6

Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) item parameter in (a) emailtofriend.pl or (b) violation.pl…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01167 Published 2006-06-22 No fix listed

Open these records in search →

Critical	0
High	2
Medium	4
Low	0
No CVSS	0