Vulnerabilities

TI-2009-02501 CVE-2009-2616 · GHSA-wh4v-6jqx-jp95

SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions SitePal 1.x…

LOW 35

SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01013 Published 2009-07-27 No fix listed CWE-89

TI-2009-02500 CVE-2009-2615 · GHSA-hcx3-pcj4-c39m

Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions SitePal 1.x…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) z_admin_login.asp, (2) z_forgot.asp, and…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00855 Published 2009-07-27 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions SitePal 1.x…

Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions SitePal 1.x…