Search vulnerabilities

Results 2

Export CSV
CVE-2008-3393

SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute arbitrary SQL commands via the events_id parameter.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2008-3394

Multiple cross-site scripting (XSS) vulnerabilities in search.cfm in BookMine allow remote attackers to inject arbitrary web script or HTML via the (1) gallery and (2) search_string parameters.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Products