CVE-2014-9435
Published Jan 2, 2015Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL commands via the (1) sectionID parameter to admin/managerse…
Vendor archive
2 CVEs tagged to vendor absolutengine — 0 Critical, 0 High, 1 Medium, 1 Low, 0 Unrated.
Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL commands via the (1) sectionID parameter to admin/managerse…
Cross-site scripting (XSS) vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.73 allows remote authenticated users to inject arbitrary web…