Export limit exceeded: 425868 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425868 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2007-1021

SQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote attackers to execute arbitrary SQL commands via the CAT_ID parameter.

CVSS 2.0 · 10.0 Critical EPSS 1.7% KEV · Not listed
Vendors
Xfairguy
Products
Codeavalanche News
CVE-2006-2499

SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to execute arbitrary SQL commands via the password field.

CVSS 2.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Xfairguy
Products
Codeavalanche News
CVE-2006-2500

Cross-site scripting (XSS) vulnerability in add_news.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to inject arbitrary web script or HTML via the Headline field. NOTE: if this issue is limited to administrators, and if it is expected behavior for administrators to be able to generate HTML, then this is not a vulnerability.

CVSS 2.0 · 6.8 Medium EPSS 1.7% KEV · Not listed
Vendors
Xfairguy
Products
Codeavalanche News