Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Classapps Component: Selectsurvey.net Clear all filters
TI-2021-18331 CVE-2021-41608 · GHSA-vwq3-p97g-f42v

A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of…

Priority LOW 37

A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the value of th…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01973 Published 2022-01-28 No fix listed CWE-639
TI-2021-18332 CVE-2021-41609 · GHSA-jx6q-6477-j7q5

SQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of…

Priority MEDIUM 46

SQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve data from the application's backend database via bool…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02138 Published 2022-01-28 No fix listed CWE-89
TI-2014-04979 CVE-2014-6030 · GHSA-c584-9f95-jr3g

Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002…

Priority LOW 32

Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1) remote attackers to execute arbitrary SQL commands via the SurveyID parameter to survey/ReviewReadOnlySurvey.aspx or (2) rem…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01727 Published 2014-11-06 No fix listed CWE-89