Vulnerabilities

TI-2007-05212 CVE-2007-5426 · GHSA-w9wr-qppp-mh4c

Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, as demonstrated by (1…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0179 Published 2007-10-12 No fix listed CWE-79

TI-2007-04942 CVE-2007-5131 · GHSA-ppvr-qxp5-wrcg

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote…

LOW 35

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01169 Published 2007-09-27 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote…

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote…