cfmagic records
4 published records for vendor cfmagic.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2005-4071Proof of concept | Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commacfmagic · magic forum personal · CWE-89 | High7.5 | — | 1.3% | Dec 7, 2005 |
30Monitor | CVE-2005-4073Proof of concept | SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitrary SQL commands via cfmagic · magic list pro · CWE-89 | High7.5 | — | 1.1% | Dec 7, 2005 |
18Monitor | CVE-2005-4177Proof of concept | Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers to inject arbitrarycfmagic · magic book personal | Medium4.3 | — | 1.9% | Dec 11, 2005 |
17Monitor | CVE-2005-4072No exploit | Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web scrcfmagic · magic forum personal | Medium4.3 | — | 1.2% | Dec 7, 2005 |
- CVE-2005-407130Monitor
Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL comma
HighCVSS 7.5Proof of conceptEPSS 1%cfmagic · magic forum personalDec 7, 2005
- CVE-2005-407330Monitor
SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitrary SQL commands via
HighCVSS 7.5Proof of conceptEPSS 1%cfmagic · magic list proDec 7, 2005
- CVE-2005-417718Monitor
Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers to inject arbitrary
MediumCVSS 4.3Proof of conceptEPSS 2%cfmagic · magic book personalDec 11, 2005
- CVE-2005-407217Monitor
Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web scr
MediumCVSS 4.3No exploitEPSS 1%cfmagic · magic forum personalDec 7, 2005