Vulnerabilities

TI-2008-06044 CVE-2008-6352 · GHSA-xvcg-ff9f-p7x7

SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to…

LOW 35

SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands via the menu parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-03-02 No fix listed CWE-89

TI-2008-02954 CVE-2008-3089 · GHSA-r874-7872-gp98

SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008)…

LOW 35

SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote attackers to execute arbitrary SQL commands via the uid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0101 Published 2008-07-09 No fix listed CWE-89

TI-2008-01801 CVE-2008-1874 · GHSA-7rxg-43hm-rxmc

SQL injection vulnerability in account/user/mail.html in Xpoze Pro 3.05 and earlier…

LOW 30

SQL injection vulnerability in account/user/mail.html in Xpoze Pro 3.05 and earlier allows remote authenticated users to execute arbitrary SQL commands via the reed parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.00856 Published 2008-04-17 No fix listed CWE-89

Vulnerabilities

Filters

SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to…

SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008)…

SQL injection vulnerability in account/user/mail.html in Xpoze Pro 3.05 and earlier…