Vendor archive

cfmagic CVEs

Beta · best-effort

4 CVEs tagged to vendor cfmagic — 0 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2005-4177

Published Dec 12, 2005

Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers to inject arbitrary web script or HTML via the StartRow pa…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2005-4071

Published Dec 8, 2005

Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ForumID parameter in vi…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2005-4072

Published Dec 8, 2005

Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2005-4073

Published Dec 8, 2005

SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitrary SQL commands via the ListID parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1