Uiga

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Uiga records in CISA KEV

No Uiga vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fan Club 4 records LOW Business Portal 2 records LOW Church Portal 2 records LOW Personal Portal 2 records LOW Proxy 1 record LOW

Records

11 records

TI-2012-03469 CVE-2012-4056 · GHSA-m94w-hxf8-49vf

SQL injection vulnerability in index2.php in Uiga Personal Portal allows remote attackers…

LOW 35

SQL injection vulnerability in index2.php in Uiga Personal Portal allows remote attackers to execute arbitrary SQL commands via the p parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01303 Published 2012-07-25 No fix listed CWE-89

TI-2012-03468 CVE-2012-4055 · GHSA-q53h-2rr5-4cff

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to…

LOW 35

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01113 Published 2012-07-25 No fix listed CWE-89

TI-2010-01321 CVE-2010-1366 · GHSA-6g7c-h9v8-x3fp

Multiple SQL injection vulnerabilities in admin/admin_login.php in Uiga Fan Club 1.0 and…

LOW 35

Multiple SQL injection vulnerabilities in admin/admin_login.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) admin_name and (2) admin_password parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00931 Published 2010-04-13 No fix listed CWE-89

TI-2010-01320 CVE-2010-1365 · GHSA-j4p2-57fr-m7mc

SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310…

LOW 35

SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01012 Published 2010-04-13 No fix listed CWE-89

TI-2010-01319 CVE-2010-1364 · GHSA-95cg-xx3r-rr3x

SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on…

LOW 35

SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00981 Published 2010-04-13 No fix listed CWE-89

TI-2010-01008 CVE-2010-1049 · GHSA-2848-7hhm-gmxm

Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute arbitrary SQL commands via the (1) noentryid parameter to blog/index.php and the (2) p parameter to index2.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2010-03-22 No fix listed CWE-89

TI-2009-02971 CVE-2009-3116 · GHSA-wxhf-r74j-fmh8

SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the year parameter in a calendar action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01002 Published 2009-09-09 No fix listed CWE-89

TI-2009-02936 CVE-2009-3081 · GHSA-pcmf-mvr6-mrr7

SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the month parameter in a calendar action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2009-09-04 No fix listed CWE-89

TI-2010-01477 CVE-2010-1528 · GHSA-44g8-q969-2xj9

PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when…

LOW 34

PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01964 Published 2010-04-26 No fix listed CWE-94

TI-2010-01007 CVE-2010-1048 · GHSA-5mcc-54x4-8c4q

Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows…

LOW 23

Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter (aka the Comment Box) in a noentryid action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01449 Published 2010-03-22 No fix listed CWE-79

TI-2010-01322 CVE-2010-1367 · GHSA-g76f-36m6-jxrw

Multiple cross-site scripting (XSS) vulnerabilities in admin/admin_login.php in Uiga Fan…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in admin/admin_login.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the (1) admin_name and (2) admin…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00855 Published 2010-04-13 No fix listed CWE-79

Open these records in search →

Critical	0
High	8
Medium	3
Low	0
No CVSS	0