Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Openconstructor Project Clear all filters
TI-2012-03342 CVE-2012-3873 · GHSA-7qj7-8v3f-j6g5

Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote…

Priority LOW 31

Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1) data/gallery/edit.php, (2) data/guestbook/edit.php, (3) dat…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0092 Published 2012-12-28 No fix listed CWE-89
TI-2012-03339 CVE-2012-3870 · GHSA-49g9-xqq4-3p7j

Multiple cross-site scripting (XSS) vulnerabilities in objects/createobject.php in Open…

Priority LOW 18

Multiple cross-site scripting (XSS) vulnerabilities in objects/createobject.php in Open Constructor 3.12.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) name or (2) description param…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00767 Published 2012-12-28 No fix listed CWE-79