Vendors / Wholehogsoftware Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 4 CVSS 7.0–8.9
Exploited now Wholehogsoftware records in CISA KEV No Wholehogsoftware vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02831 · Published 2009-02-06 · No fix listed CWE-287
Priority LOW 37
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter (aka Username field) or (2)…
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02143 · Published 2009-02-06 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
Critical0 High4 Medium0 Low0 No CVSS0