Vulnerabilities

TI-2007-00989 CVE-2007-1021 · GHSA-7g52-xfm9-8p6h

SQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote…

MEDIUM 46

SQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote attackers to execute arbitrary SQL commands via the CAT_ID parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01658 Published 2007-02-21 No fix listed

TI-2006-02834 CVE-2006-2927 · GHSA-j4v3-5jgp-v85f

Multiple cross-site scripting (XSS) vulnerabilities in post.asp in CodeAvalanche…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in post.asp in CodeAvalanche FreeForum (aka CAForum) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_subject and (2) msg_body paramete…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01822 Published 2006-06-09 No fix listed

TI-2006-02730 CVE-2006-2822 · GHSA-w3gr-mc6q-x9wf

SQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum…

LOW 36

SQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum (aka CAForum) 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01337 Published 2006-06-05 No fix listed

TI-2006-02431 CVE-2006-2500 · GHSA-849p-j3j9-wq54

Cross-site scripting (XSS) vulnerability in add_news.asp in CodeAvalanche News (CANews)…

LOW 33

Cross-site scripting (XSS) vulnerability in add_news.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to inject arbitrary web script or HTML via the Headline field.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01675 Published 2006-05-20 No fix listed

TI-2006-02430 CVE-2006-2499 · GHSA-54vr-jrrm-8j5c

SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows…