Skip to content
Noroxi

preproject records

8 published records for vendor preproject.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
6
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    8 records
    • CVE-2008-6228
      31Monitor

      Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname

      HighCVSS 7.5Proof of conceptEPSS 3%

      preproject · pre multi-vendor shopping mallsFeb 20, 2009

    • CVE-2008-5058
      31Monitor

      SQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary SQL commands via the

      HighCVSS 7.5Proof of conceptEPSS 2%

      preproject · pre simple cmsNov 13, 2008

    • CVE-2010-4959
      30Monitor

      SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL command

      HighCVSS 7.5Proof of conceptEPSS 1%

      preproject · pre podcast portalOct 9, 2011

    • CVE-2008-3310
      30Monitor

      SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid parame

      HighCVSS 7.5Proof of conceptEPSS 1%

      preproject · pre survey pollJul 25, 2008

    • CVE-2008-6329
      30Monitor

      SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the (1)

      HighCVSS 7.5Proof of conceptEPSS 1%

      preproject · pre asp job boardFeb 27, 2009

    • CVE-2008-6227
      30Monitor

      SQL injection vulnerability in buyer_detail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands

      HighCVSS 7.5Proof of conceptEPSS 1%

      preproject · pre multi-vendor shopping mallsFeb 20, 2009

    • CVE-2008-6226
      27Monitor

      SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magic_quotes_gpc is disabled, allows remote attac

      MediumCVSS 6.8Proof of conceptEPSS 1%

      preproject · php auto listings scriptFeb 20, 2009

    • CVE-2008-6847
      17Monitor

      Cross-site scripting (XSS) vulnerability in Employee/emp_login.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web scri

      MediumCVSS 4.3Proof of conceptEPSS 1%

      preproject · pre asp job boardJul 2, 2009