Vendor/product archive

intesync / miniweb CVEs

Beta · best-effort

4 CVEs tagged to intesync / miniweb — 0 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to intesync vendor archive

CVE-2009-4552

Published Jan 4, 2010

Cross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2009-4551

Published Jan 4, 2010

SQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the campaign_id parameter in a results action to…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2009-3420

Published Sep 25, 2009

Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the (1)…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2009-3419

Published Sep 25, 2009

SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1