Skip to content
Noroxi

netref records

4 published records for vendor netref.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    4 records
    • CVE-2005-1222
      32Monitor

      cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct parameter to reference

      HighCVSS 7.5Proof of conceptEPSS 7%

      netref · netrefMay 2, 2005

    • CVE-2005-4198
      30Monitor

      SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter.

      HighCVSS 7.5Proof of conceptEPSS 1%

      netref · netrefDec 13, 2005

    • CVE-2008-5561
      30Monitor

      SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) fiche_produc

      HighCVSS 7.5Proof of conceptEPSS 1%

      netref · netrefDec 15, 2008

    • CVE-2006-5618
      21Monitor

      Directory traversal vulnerability in script/cat_for_aff.php in Netref 4 allows remote attackers to read arbitrary files via a ..

      MediumCVSS 5.0Proof of conceptEPSS 3%

      netref · netrefOct 30, 2006