thinkfactory records

6 published records for vendor thinkfactory.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2006-3236No exploit	Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id pthinkfactory · thinkwms pre-auth RCE SQL injection	High7.5	—	1.4%	Jun 27, 2006
30Monitor	CVE-2006-3154No exploit	SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via thethinkfactory · ultimate estate pre-auth RCE SQL injection	High7.5	—	1.4%	Jun 22, 2006
23Monitor	CVE-2006-3157No exploit	Cross-site scripting (XSS) vulnerability in index.php in Thinkfactory UltimateGoogle 1.00 and earlier allows remote attackers to inject arbithinkfactory · ultimategoogle Pre-auth XSS	Medium5.8	—	1.3%	Jun 22, 2006
17Monitor	CVE-2006-3156No exploit	Cross-site scripting (XSS) vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attackers to inject arbitrary web scrithinkfactory · ultimate eshop Pre-auth XSS	Medium4.3	—	1.3%	Jun 22, 2006
17Monitor	CVE-2006-3153No exploit	Cross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inject arbitrary web scrithinkfactory · ultimate estate Pre-auth XSS	Medium4.3	—	1.3%	Jun 22, 2006
17Monitor	CVE-2006-3155No exploit	Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to inject arbitrary web scripthinkfactory · ultimate estate Pre-auth XSS	Medium4.3	—	1.2%	Jun 22, 2006

CVE-2006-3236
30Monitor
Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id p
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
- SQL injection
thinkfactory · thinkwmsJun 27, 2006
CVE-2006-3154
30Monitor
SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
- SQL injection
thinkfactory · ultimate estateJun 22, 2006
CVE-2006-3157
23Monitor
Cross-site scripting (XSS) vulnerability in index.php in Thinkfactory UltimateGoogle 1.00 and earlier allows remote attackers to inject arbi
MediumCVSS 5.8No exploitEPSS 1%
- Pre-auth
- XSS
thinkfactory · ultimategoogleJun 22, 2006
CVE-2006-3156
17Monitor
Cross-site scripting (XSS) vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attackers to inject arbitrary web scri
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
thinkfactory · ultimate eshopJun 22, 2006
CVE-2006-3153
17Monitor
Cross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inject arbitrary web scri
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
thinkfactory · ultimate estateJun 22, 2006
CVE-2006-3155
17Monitor
Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to inject arbitrary web scrip
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
thinkfactory · ultimate estateJun 22, 2006