Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Collector Component: Mycolex Clear all filters
TI-2009-01722 CVE-2009-1810 · GHSA-2g4q-4f6w-5q4g

Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute…

Priority LOW 29

Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1) the formUser parameter (aka the Name field) to common/login.php, and allow remote authenticated use…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00886 Published 2009-05-29 No fix listed CWE-89
TI-2009-01721 CVE-2009-1809 · GHSA-p49g-fqv9-mmrh

Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the year parameter to modules/kalender.php, (2) the Page parameter in a List acti…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01484 Published 2009-05-29 No fix listed CWE-79