Uiga

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Uiga records in CISA KEV

No Uiga vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fan Club 4 records LOW Business Portal 2 records LOW Church Portal 2 records LOW Personal Portal 2 records LOW Proxy 1 record LOW

Records

4 records in Fan Club · all components

TI-2012-03468 CVE-2012-4055 · GHSA-q53h-2rr5-4cff

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to…

LOW 35

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01113 Published 2012-07-25 No fix listed CWE-89

TI-2010-01321 CVE-2010-1366 · GHSA-6g7c-h9v8-x3fp

Multiple SQL injection vulnerabilities in admin/admin_login.php in Uiga Fan Club 1.0 and…

LOW 35

Multiple SQL injection vulnerabilities in admin/admin_login.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) admin_name and (2) admin_password parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00931 Published 2010-04-13 No fix listed CWE-89

TI-2010-01320 CVE-2010-1365 · GHSA-j4p2-57fr-m7mc

SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310…

LOW 35

SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01012 Published 2010-04-13 No fix listed CWE-89

TI-2010-01322 CVE-2010-1367 · GHSA-g76f-36m6-jxrw

Multiple cross-site scripting (XSS) vulnerabilities in admin/admin_login.php in Uiga Fan…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in admin/admin_login.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the (1) admin_name and (2) admin…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00855 Published 2010-04-13 No fix listed CWE-79

Open these records in search →

Critical	0
High	8
Medium	3
Low	0
No CVSS	0