oscmax records

3 published records for vendor oscmax.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2012-1665Proof of concept	Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow (1) remote attackers to execute arbitrary SQL commandoscmax · oscmax · CWE-89 pre-auth RCE SQL injection	High7.5	—	1.5%	May 20, 2015
27Monitor	CVE-2012-6691No exploit	Multiple cross-site request forgery (CSRF) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to hijack the auoscmax · oscmax · CWE-352 Pre-auth SQL injection CSRF	Medium6.8	—	0.6%	May 20, 2015
18Monitor	CVE-2012-1664Proof of concept	Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary weboscmax · oscmax · CWE-79 Pre-auth XSS	Medium4.3	—	2.8%	May 20, 2015

CVE-2012-1665
30Monitor
Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow (1) remote attackers to execute arbitrary SQL command
HighCVSS 7.5Proof of conceptEPSS 2%
- pre-auth RCE
- SQL injection
oscmax · oscmaxMay 20, 2015
CVE-2012-6691
27Monitor
Multiple cross-site request forgery (CSRF) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to hijack the au
MediumCVSS 6.8No exploitEPSS 1%
oscmax · oscmaxMay 20, 2015
CVE-2012-1664
18Monitor
Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web
MediumCVSS 4.3Proof of conceptEPSS 3%
- Pre-auth
- XSS
oscmax · oscmaxMay 20, 2015