Vulnerabilities

TI-2010-01008 CVE-2010-1049 · GHSA-2848-7hhm-gmxm

Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute arbitrary SQL commands via the (1) noentryid parameter to blog/index.php and the (2) p parameter to index2.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2010-03-22 No fix listed CWE-89

TI-2010-01007 CVE-2010-1048 · GHSA-5mcc-54x4-8c4q

Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows…

LOW 23

Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter (aka the Comment Box) in a noentryid action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01449 Published 2010-03-22 No fix listed CWE-79

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to…

Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows…