İçeriğe atla
Noroxi

enthrallweb kayıtları

enthrallweb üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
11
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    15 kayıt
    • CVE-2006-3027
      31İzleyin

      Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via

      YüksekCVSS 7,5Kavram kanıtıEPSS %3

      enthrallweb · ephotos15 Haz 2006

    • CVE-2006-6074
      30İzleyin

      Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via (1) the Pr

      YüksekCVSS 7,5İstismar yokEPSS %1

      enthrallweb · eshopping cart24 Kas 2006

    • CVE-2006-6208
      30İzleyin

      Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL commands via the (1) AD_I

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      enthrallweb · eclassifieds30 Kas 2006

    • CVE-2006-6204
      30İzleyin

      Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands via the (1) cid parame

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      enthrallweb · ehomes30 Kas 2006

    • CVE-2006-6073
      30İzleyin

      Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Pr

      YüksekCVSS 7,5İstismar yokEPSS %1

      enthrallweb · eshopping cart24 Kas 2006

    • CVE-2006-6805
      30İzleyin

      SQL injection vulnerability in newsdetail.asp in Enthrallweb eJobs allows remote attackers to execute arbitrary SQL commands via the ID para

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      enthrallweb · ejobs28 Ara 2006

    • CVE-2006-6806
      30İzleyin

      SQL injection vulnerability in newsdetail.asp in Enthrallweb eMates 1.0 allows remote attackers to execute arbitrary SQL commands via the ID

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      enthrallweb · emates28 Ara 2006

    • CVE-2006-6802
      30İzleyin

      SQL injection vulnerability in actualpic.asp in Enthrallweb ePages allows remote attackers to execute arbitrary SQL commands via the Biz_ID

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      enthrallweb · epages28 Ara 2006

    • CVE-2006-6804
      30İzleyin

      SQL injection vulnerability in bus_details.asp in Dragon Business Directory - Pro (aka Dragon Internet Business Search Directory - Pro) 3.01

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      enthrallweb · dragon business directory pro28 Ara 2006

    • CVE-2006-6803
      30İzleyin

      SQL injection vulnerability in Types.asp in Enthrallweb eCars 1.0 allows remote attackers to execute arbitrary SQL commands via the Type_id

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      enthrallweb · ecars28 Ara 2006

    • CVE-2009-0252
      30İzleyin

      Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      enthrallweb · ereservations22 Oca 2009

    • CVE-2006-6205
      28İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to inject arbitrary web scrip

      OrtaCVSS 6,8Kavram kanıtıEPSS %2

      enthrallweb · ehomes30 Kas 2006

    • CVE-2006-6820
      15İzleyin

      myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId parameter during profile updates, which allows remote authe

      DüşükCVSS 3,5Kavram kanıtıEPSS %2

      enthrallweb · ecoupons29 Ara 2006

    • CVE-2006-6821
      15İzleyin

      myprofile.asp in Enthrallweb eNews does not properly validate the MM_recordId parameter during profile updates, which allows remote authenti

      DüşükCVSS 3,5Kavram kanıtıEPSS %2

      enthrallweb · enews29 Ara 2006

    • CVE-2006-6822
      15İzleyin

      myprofile.asp in Enthrallweb eClassifieds does not properly validate the MM_recordId parameter during profile updates, which allows remote a

      DüşükCVSS 3,5Kavram kanıtıEPSS %2

      enthrallweb · eclassifieds29 Ara 2006