Xfairguy

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Xfairguy records in CISA KEV

No Xfairguy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Codeavalanche News 3 records MEDIUM Codeavalanche Freeforum 2 records LOW

Records

5 records

TI-2007-00989 CVE-2007-1021 · GHSA-7g52-xfm9-8p6h

SQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote…

MEDIUM 46

SQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote attackers to execute arbitrary SQL commands via the CAT_ID parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01658 Published 2007-02-21 No fix listed

TI-2006-02730 CVE-2006-2822 · GHSA-w3gr-mc6q-x9wf

SQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum…

LOW 36

SQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum (aka CAForum) 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01337 Published 2006-06-05 No fix listed

TI-2006-02430 CVE-2006-2499 · GHSA-54vr-jrrm-8j5c

SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows…

LOW 36

SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to execute arbitrary SQL commands via the password field.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01321 Published 2006-05-20 No fix listed

TI-2006-02431 CVE-2006-2500 · GHSA-849p-j3j9-wq54

Cross-site scripting (XSS) vulnerability in add_news.asp in CodeAvalanche News (CANews)…

LOW 33

Cross-site scripting (XSS) vulnerability in add_news.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to inject arbitrary web script or HTML via the Headline field.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01675 Published 2006-05-20 No fix listed

TI-2006-02834 CVE-2006-2927 · GHSA-j4v3-5jgp-v85f

Multiple cross-site scripting (XSS) vulnerabilities in post.asp in CodeAvalanche…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in post.asp in CodeAvalanche FreeForum (aka CAForum) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_subject and (2) msg_body paramete…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01822 Published 2006-06-09 No fix listed

Open these records in search →

Critical	1
High	2
Medium	2
Low	0
No CVSS	0