Vulnerabilities

TI-2008-05589 CVE-2008-5893 · GHSA-84pq-rgvh-gvmq

Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows…

LOW 16

Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inject arbitrary web script or HTML via the tablename parameter in an update action.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01577 Published 2009-01-12 No fix listed CWE-79

TI-2008-05588 CVE-2008-5892 · GHSA-cr39-jwm6-p577

Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL commands via (1) the ID parameter to admin_dblayers.asp in an update action, (2) the adminid parameter to admin_logi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-01-12 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows…

Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute…