Xlinesoft records
7 published records for vendor xlinesoft.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2009-0963Proof of concept | Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via xlinesoft · phprunner · CWE-89 | High7.5 | — | 2.0% | Mar 19, 2009 |
31Monitor | CVE-2009-0964Proof of concept | UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privxlinesoft · phprunner · CWE-312 | High7.5 | — | 1.9% | Mar 19, 2009 |
30Monitor | CVE-2004-2057No exploit | SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.xlinesoft · asprunner | High7.5 | — | 1.5% | Dec 31, 2004 |
23Monitor | CVE-2004-2059Proof of concept | Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Seaxlinesoft · asprunner | Medium5.0 | — | 8.8% | Dec 31, 2004 |
22Monitor | CVE-2004-2060Proof of concept | ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direxlinesoft · asprunner | Medium5.0 | — | 7.9% | Dec 31, 2004 |
21Monitor | CVE-2004-2058No exploit | ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages.xlinesoft · asprunner | Medium5.0 | — | 1.7% | Dec 31, 2004 |
8Monitor | CVE-2006-5956No exploit | XLineSoft PHPRunner 3.1 stores the (1) database server name, (2) database names, (3) usernames, and (4) passwords in plaintext in %WINDIR%\Pxlinesoft · phprunner | Low2.1 | — | 0.3% | Nov 16, 2006 |
- CVE-2009-096331Monitor
Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via
HighCVSS 7.5Proof of conceptEPSS 2%xlinesoft · phprunnerMar 19, 2009
- CVE-2009-096431Monitor
UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain priv
HighCVSS 7.5Proof of conceptEPSS 1%xlinesoft · phprunnerMar 19, 2009
- CVE-2004-205730Monitor
SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.
HighCVSS 7.5No exploitEPSS 1%xlinesoft · asprunnerDec 31, 2004
- CVE-2004-205923Monitor
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Sea
MediumCVSS 5.0Proof of conceptEPSS 8%xlinesoft · asprunnerDec 31, 2004
- CVE-2004-206022Monitor
ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a dire
MediumCVSS 5.0Proof of conceptEPSS 7%xlinesoft · asprunnerDec 31, 2004
- CVE-2004-205821Monitor
ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages.
MediumCVSS 5.0No exploitEPSS 1%xlinesoft · asprunnerDec 31, 2004
- CVE-2006-59568Monitor
XLineSoft PHPRunner 3.1 stores the (1) database server name, (2) database names, (3) usernames, and (4) passwords in plaintext in %WINDIR%\P
LowCVSS 2.1No exploitEPSS 0%xlinesoft · phprunnerNov 16, 2006