Vulnerabilities

TI-2007-02715 CVE-2007-2805 · GHSA-4352-wv85-hjf8

Multiple cross-site scripting (XSS) vulnerabilities in index.php in ClientExec (CE) 3.0…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in index.php in ClientExec (CE) 3.0 beta2, and possibly other versions, allow remote attackers to inject arbitrary web script or HTML via the (1) ticketID, (2) view, an…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01495 Published 2007-05-22 No fix listed

TI-2005-04361 CVE-2005-4630 · GHSA-5pc5-6r92-7p4x

SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to…

LOW 36

SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) billshowid, (2) billdetailid, (3) fuse, and (4) frmClientID parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0153 Published 2006-01-07 No fix listed

TI-2004-01466 CVE-2004-1590 · GHSA-wq5g-65xw-2w6q

Clientexec allows remote attackers to gain sensitive information via an HTTP request to…

LOW 26

Clientexec allows remote attackers to gain sensitive information via an HTTP request to phpinfo.php, which calls the phpinfo function.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01336 Published 2005-02-20 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in index.php in ClientExec (CE) 3.0…

SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to…

Clientexec allows remote attackers to gain sensitive information via an HTTP request to…