Uiga

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Uiga records in CISA KEV

No Uiga vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fan Club 4 records LOW Business Portal 2 records LOW Church Portal 2 records LOW Personal Portal 2 records LOW Proxy 1 record LOW

Records

2 records in Business Portal · all components

TI-2010-01008 CVE-2010-1049 · GHSA-2848-7hhm-gmxm

Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute arbitrary SQL commands via the (1) noentryid parameter to blog/index.php and the (2) p parameter to index2.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2010-03-22 No fix listed CWE-89

TI-2010-01007 CVE-2010-1048 · GHSA-5mcc-54x4-8c4q

Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows…

LOW 23

Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter (aka the Comment Box) in a noentryid action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01449 Published 2010-03-22 No fix listed CWE-79

Open these records in search →

Critical	0
High	8
Medium	3
Low	0
No CVSS	0