wholehogsoftware records
4 published records for vendor wholehogsoftware.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-287 Improper Authentication2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2009-0460Proof of concept | Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the admwholehogsoftware · ware support · CWE-287 | High7.5 | — | 2.8% | Feb 10, 2009 |
31Monitor | CVE-2009-0461Proof of concept | Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer vawholehogsoftware · password protect · CWE-287 | High7.5 | — | 2.8% | Feb 10, 2009 |
31Monitor | CVE-2009-0458Proof of concept | Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary Swholehogsoftware · ware support · CWE-89 | High7.5 | — | 2.3% | Feb 10, 2009 |
31Monitor | CVE-2009-0459Proof of concept | Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remote attackers to execuwholehogsoftware · password protect · CWE-89 | High7.5 | — | 2.1% | Feb 10, 2009 |
- CVE-2009-046031Monitor
Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adm
HighCVSS 7.5Proof of conceptEPSS 3%wholehogsoftware · ware supportFeb 10, 2009
- CVE-2009-046131Monitor
Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer va
HighCVSS 7.5Proof of conceptEPSS 3%wholehogsoftware · password protectFeb 10, 2009
- CVE-2009-045831Monitor
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary S
HighCVSS 7.5Proof of conceptEPSS 2%wholehogsoftware · ware supportFeb 10, 2009
- CVE-2009-045931Monitor
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remote attackers to execu
HighCVSS 7.5Proof of conceptEPSS 2%wholehogsoftware · password protectFeb 10, 2009