Vulnerabilities

TI-2006-06202 CVE-2006-6455 · GHSA-m75j-pqvr-h6mm

Multiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1…

LOW 35

Multiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1, and possibly DUdirectory Pro and Pro SQL 3.x, allow remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Pa…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01312 Published 2006-12-10 No fix listed

TI-2006-06103 CVE-2006-6354 · GHSA-wvrv-cpq7-jg6v

Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote…

LOW 36

Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote attackers to execute arbitrary SQL commands via the (1) iNews, (2) iType, or (3) Action parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01689 Published 2006-12-07 No fix listed

TI-2005-03768 CVE-2005-3976 · GHSA-8cpm-2q4p-34xp

SQL injection vulnerability in type.asp, as used in multiple DUware products including…

LOW 35

SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2005-12-03 No fix listed

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1…

Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote…

SQL injection vulnerability in type.asp, as used in multiple DUware products including…