Vulnerabilities

TI-2008-02742 CVE-2008-2868 · GHSA-379x-8r69-fqm5

SQL injection vulnerability in detail.asp in DUware DUcalendar 1.0 and possibly earlier…

LOW 35

SQL injection vulnerability in detail.asp in DUware DUcalendar 1.0 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the iEve parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2008-06-26 No fix listed CWE-89

TI-2006-06202 CVE-2006-6455 · GHSA-m75j-pqvr-h6mm

Multiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1…

LOW 35

Multiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1, and possibly DUdirectory Pro and Pro SQL 3.x, allow remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Pa…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01312 Published 2006-12-10 No fix listed

TI-2006-06115 CVE-2006-6367 · GHSA-h3f8-qq4m-pp68

Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and…

LOW 36

Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) iFile or (2) action parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01595 Published 2006-12-07 No fix listed CWE-89

TI-2006-06113 CVE-2006-6365 · GHSA-j2c3-fc72-4vf3

SQL injection vulnerability in detail.asp in DUware DUpaypal 3.1, and possibly earlier…

LOW 36

SQL injection vulnerability in detail.asp in DUware DUpaypal 3.1, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the iType parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01444 Published 2006-12-07 No fix listed

TI-2006-06104 CVE-2006-6355 · GHSA-2h52-qv92-fqx2

SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers…

MEDIUM 47

SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL commands via the iCity parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01874 Published 2006-12-07 No fix listed

TI-2006-06103 CVE-2006-6354 · GHSA-wvrv-cpq7-jg6v

Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote…

LOW 36

Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote attackers to execute arbitrary SQL commands via the (1) iNews, (2) iType, or (3) Action parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01689 Published 2006-12-07 No fix listed

TI-2006-04335 CVE-2006-4487 · GHSA-3qcv-2mv7-28qv

DUware DUpoll 3.0 and 3.1 stores _private/Dupoll.mdb under the web document root with…

LOW 26

DUware DUpoll 3.0 and 3.1 stores _private/Dupoll.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01657 Published 2006-08-31 No fix listed

TI-2006-02242 CVE-2006-2302 · GHSA-8wmx-wghv-vhp3

SQL injection vulnerability in admin_default.asp in DUGallery 2.x allows remote attackers…

LOW 36

SQL injection vulnerability in admin_default.asp in DUGallery 2.x allows remote attackers to execute arbitrary SQL commands via the (1) Login or (2) password field.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0133 Published 2006-05-11 No fix listed

TI-2006-02076 CVE-2006-2132 · GHSA-qw3q-7j44-j347

SQL injection vulnerability in detail.asp in DUclassified allows remote attackers to…

LOW 30

SQL injection vulnerability in detail.asp in DUclassified allows remote attackers to execute arbitrary SQL commands via the iPro parameter.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.00924 Published 2006-05-01 No fix listed

TI-2005-03768 CVE-2005-3976 · GHSA-8cpm-2q4p-34xp

SQL injection vulnerability in type.asp, as used in multiple DUware products including…

LOW 35

SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2005-12-03 No fix listed

TI-2004-02074 CVE-2004-2202 · GHSA-47vx-qx7p-xf23

Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows…

LOW 36

Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authentication and execute other commands on the server's underlying database via the (1) cat_id or (2) sub_…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01452 Published 2005-07-10 No fix listed

TI-2004-02073 CVE-2004-2201 · GHSA-mmhx-4q4c-qfq9

SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to…

LOW 35

SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands via the FOR_ID parameter in messages.asp, (2) MSG_ID parameter in messageDetail.asp, or (3) password…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0129 Published 2005-07-10 No fix listed

TI-2004-02072 CVE-2004-2200 · GHSA-45vf-ccx3-9p8v

Cross-site scripting (XSS) vulnerability in DUware DUforum 3.0 through 3.1 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to inject arbitrary web script or HTML via via the message text.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01938 Published 2005-07-10 No fix listed

TI-2004-02071 CVE-2004-2199 · GHSA-hm4c-jr69-832c

Cross-site scripting (XSS) vulnerability in DUware DUclassified 4.0 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in DUware DUclassified 4.0 allows remote attackers to inject arbitrary web script or HTML via the message text.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01917 Published 2005-07-10 No fix listed

TI-2004-02070 CVE-2004-2198 · GHSA-ppq9-7r27-4m7g

account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the…

LOW 37

account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the "My Account" page.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.06077 Published 2005-07-10 No fix listed

TI-2005-01937 CVE-2005-2049 · GHSA-77qf-7v4v-3v74

Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers…

LOW 37

Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) iState parameter to default.asp or (2) iPro parameter to edit.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02411 Published 2005-06-22 No fix listed

TI-2005-01936 CVE-2005-2048 · GHSA-pvmg-9g4x-3wv7

Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other…

LOW 37

Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the (1) iMsg parameter to messages.asp, iFor parameter to (2) post.a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02438 Published 2005-06-22 No fix listed

TI-2005-01935 CVE-2005-2047 · GHSA-3892-fhf4-9jgg

Multiple SQL injection vulnerabilities in DUware DUpaypal Pro 3.0 allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in DUware DUpaypal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iPro parameter to detail.asp, (3) iSub parameter to su…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0121 Published 2005-06-22 No fix listed

TI-2005-01934 CVE-2005-2046 · GHSA-x3rc-35mx-mpj8

Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote…

LOW 37

Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iSub parameter to sub.asp, (3) iSub parameter…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02083 Published 2005-06-22 No fix listed

TI-2005-01933 CVE-2005-2045 · GHSA-c38r-j6hj-cp53

Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote…

LOW 36

Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote attackers to execute arbitrary SQL commands via the (1) iChannel parameter to default.asp, (2) iData parameter to detail.asp, (3) iMem para…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0133 Published 2005-06-22 No fix listed

TI-2005-01171 CVE-2005-1236 · GHSA-78fv-f7vr-m89j

Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow…

LOW 37

Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrary SQL commands via the (1) iChannel parameter to channel.asp or search.asp, (2) iData parameter to d…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02411 Published 2005-04-24 No fix listed

TI-2005-01159 CVE-2005-1224 · GHSA-4cc2-ww2m-x787

Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers…

LOW 39

Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) nChannel parameter to default.asp, cat.asp, or detail.asp, (2) the iChannel parameter…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03655 Published 2005-04-22 No fix listed

Vulnerabilities

Filters