sepcity records
4 published records for vendor sepcity.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-312 Cleartext Storage of Sensitive Information1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2008-6157Proof of concept | SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent attackers to obtain sesepcity · classified ads · CWE-312 | High7.5 | — | 3.0% | Feb 17, 2009 |
30Monitor | CVE-2008-6150Proof of concept | SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbitrary SQL commands via the ID psepcity · classified ads · CWE-89 | High7.5 | — | 1.0% | Feb 16, 2009 |
30Monitor | CVE-2008-6151Proof of concept | SQL injection vulnerability in shpdetails.asp in SepCity Shopping Mall allows remote attackers to execute arbitrary SQL commands via the ID sepcity · shopping mall · CWE-89 | High7.5 | — | 1.0% | Feb 16, 2009 |
30Monitor | CVE-2008-6152Proof of concept | SQL injection vulnerability in deptdisplay.asp in SepCity Faculty Portal allows remote attackers to execute arbitrary SQL commands via the Isepcity · faculty portal · CWE-89 | High7.5 | — | 1.0% | Feb 16, 2009 |
- CVE-2008-615731Monitor
SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent attackers to obtain se
HighCVSS 7.5Proof of conceptEPSS 3%sepcity · classified adsFeb 17, 2009
- CVE-2008-615030Monitor
SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbitrary SQL commands via the ID p
HighCVSS 7.5Proof of conceptEPSS 1%sepcity · classified adsFeb 16, 2009
- CVE-2008-615130Monitor
SQL injection vulnerability in shpdetails.asp in SepCity Shopping Mall allows remote attackers to execute arbitrary SQL commands via the ID
HighCVSS 7.5Proof of conceptEPSS 1%sepcity · shopping mallFeb 16, 2009
- CVE-2008-615230Monitor
SQL injection vulnerability in deptdisplay.asp in SepCity Faculty Portal allows remote attackers to execute arbitrary SQL commands via the I
HighCVSS 7.5Proof of conceptEPSS 1%sepcity · faculty portalFeb 16, 2009