Vulnerabilities

TI-2009-03191 CVE-2009-3349 · GHSA-8hhx-c6j2-6m2w

SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute…

LOW 37

SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a cat action to the home component.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01839 Published 2009-09-24 No fix listed CWE-89

TI-2009-03190 CVE-2009-3348 · GHSA-79g3-3mvq-3m6x

Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to…

LOW 23

Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01247 Published 2009-09-24 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute…

Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to…