Vulnerabilities

TI-2010-04236 CVE-2010-4505 · GHSA-w9cm-7f3g-v335

Multiple SQL injection vulnerabilities in login.php in Injader 2.4.4, when…

LOW 32

Multiple SQL injection vulnerabilities in login.php in Injader 2.4.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) un and (2) pw parameters.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00973 Published 2010-12-08 No fix listed CWE-89

TI-2008-05587 CVE-2008-5891 · GHSA-8j33-7wqq-q3wh

Cross-site scripting (XSS) vulnerability in the profile editing functionality in Injader…

LOW 23

Cross-site scripting (XSS) vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01497 Published 2009-01-12 No fix listed CWE-79

TI-2008-05586 CVE-2008-5890 · GHSA-h3p2-p62v-cpmr

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers…

LOW 35

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01029 Published 2009-01-12 No fix listed CWE-89

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in login.php in Injader 2.4.4, when…

Cross-site scripting (XSS) vulnerability in the profile editing functionality in Injader…

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers…