indexcor records
6 published records for vendor indexcor.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2006-0214Proof of concept | Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the db_id parameter to indexcor · ezdatabase | High7.5 | — | 2.9% | Jan 15, 2006 |
30Monitor | CVE-2005-4303Proof of concept | SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the indexcor · ezdatabase | High7.5 | — | 1.1% | Dec 16, 2005 |
27Monitor | CVE-2007-0592No exploit | Cross-site scripting (XSS) vulnerability in EzDatabase 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified indexcor · ezdatabase | Medium6.8 | — | 1.4% | Jan 30, 2007 |
24Monitor | CVE-2006-0315Proof of concept | index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which alloindexcor · ezdatabase | Medium5.8 | — | 4.9% | Jan 18, 2006 |
21Monitor | CVE-2005-4302Proof of concept | Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitrary local files via indexcor · ezdatabase | Medium5.0 | — | 2.5% | Dec 16, 2005 |
20Monitor | CVE-2005-4304No exploit | index.php in ezDatabase 2.1.2 and earlier allows remote attackers to obtain sensitive information via an invalid cat_id parameter, which leaindexcor · ezdatabase | Medium5.0 | — | 1.5% | Dec 16, 2005 |
- CVE-2006-021431Monitor
Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the db_id parameter to
HighCVSS 7.5Proof of conceptEPSS 3%indexcor · ezdatabaseJan 15, 2006
- CVE-2005-430330Monitor
SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the
HighCVSS 7.5Proof of conceptEPSS 1%indexcor · ezdatabaseDec 16, 2005
- CVE-2007-059227Monitor
Cross-site scripting (XSS) vulnerability in EzDatabase 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified
MediumCVSS 6.8No exploitEPSS 1%indexcor · ezdatabaseJan 30, 2007
- CVE-2006-031524Monitor
index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allo
MediumCVSS 5.8Proof of conceptEPSS 5%indexcor · ezdatabaseJan 18, 2006
- CVE-2005-430221Monitor
Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitrary local files via
MediumCVSS 5.0Proof of conceptEPSS 3%indexcor · ezdatabaseDec 16, 2005
- CVE-2005-430420Monitor
index.php in ezDatabase 2.1.2 and earlier allows remote attackers to obtain sensitive information via an invalid cat_id parameter, which lea
MediumCVSS 5.0No exploitEPSS 2%indexcor · ezdatabaseDec 16, 2005