Vulnerabilities

TI-2008-05316 CVE-2008-5600 · GHSA-92mw-7x5v-6p5g

Merlix Teamworx Server stores sensitive information under the web root with insufficient…

LOW 28

Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for teamworx.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02615 Published 2008-12-16 No fix listed CWE-264

TI-2008-05315 CVE-2008-5599 · GHSA-rrcc-w72w-2j8r

SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote…

LOW 35

SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the password parameter (aka passwd field) in a login action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-12-16 No fix listed CWE-89

Vulnerabilities

Filters

Merlix Teamworx Server stores sensitive information under the web root with insufficient…

SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote…