Wiccle

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Wiccle records in CISA KEV

No Wiccle vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Iwiccle 2 records LOW Wiccle Web Builder 1 record LOW

Records

3 records

TI-2009-03062 CVE-2009-3217 · GHSA-prcv-xr7q-82jv

SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers…

LOW 35

SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers to execute arbitrary SQL commands via the member_id parameter in an edit_user action to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00947 Published 2009-09-16 No fix listed CWE-89

TI-2009-03061 CVE-2009-3216 · GHSA-wrwm-4qrx-hh9h

Multiple directory traversal vulnerabilities in iWiccle 1.01, when magic_quotes_gpc is…

LOW 24

Multiple directory traversal vulnerabilities in iWiccle 1.01, when magic_quotes_gpc is disabled, allow remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02289 Published 2009-09-16 No fix listed CWE-22

TI-2010-03067 CVE-2010-3208 · GHSA-3jvh-qjxv-65c8

Cross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and…

LOW 22

Cross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the post_text parameter in a site custom_search action to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01075 Published 2010-09-03 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0