Skip to content
Noroxi

eXo records

3 published records for vendor exo.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    3 records
    • CVE-2007-0676
      30Monitor

      SQL injection vulnerability in faq.php in ExoPHPDesk 1.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id

      MediumCVSS 6.8Proof of conceptEPSS 9%

      exo · exophpdeskFeb 2, 2007

    • CVE-2007-5991
      30Monitor

      SQL injection vulnerability in index.php in ExoPHPdesk allows remote attackers to execute arbitrary SQL commands via the user parameter in a

      HighCVSS 7.5No exploitEPSS 1%

      exo · exophpdeskNov 15, 2007

    • CVE-2007-5990
      17Monitor

      Cross-site scripting (XSS) vulnerability in ExoPHPdesk allows remote attackers to inject arbitrary web script or HTML via unspecified vector

      MediumCVSS 4.3No exploitEPSS 1%

      exo · exophpdeskNov 15, 2007