Vulnerabilities

TI-2010-04639 CVE-2010-4916 · GHSA-h2wc-cvm7-46rm

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow…

LOW 35

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2011-10-08 No fix listed CWE-89

TI-2010-04636 CVE-2010-4913 · GHSA-3v9x-2fwv-w83q

Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup…

LOW 23

Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01528 Published 2011-10-08 No fix listed CWE-79

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow…

Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup…