Vulnerabilities

TI-2006-06104 CVE-2006-6355 · GHSA-2h52-qv92-fqx2

SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers…

MEDIUM 47

SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL commands via the iCity parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01874 Published 2006-12-07 No fix listed

TI-2004-02070 CVE-2004-2198 · GHSA-ppq9-7r27-4m7g

account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the…

LOW 37

account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the "My Account" page.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.06077 Published 2005-07-10 No fix listed

TI-2005-01937 CVE-2005-2049 · GHSA-77qf-7v4v-3v74

Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers…

LOW 37

Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) iState parameter to default.asp or (2) iPro parameter to edit.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02411 Published 2005-06-22 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers…

account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the…

Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers…