Search vulnerabilities

Results 2

Export CSV
CVE-2004-1498

SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands via the messageToUserAccNum parameter.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
CVE-2004-1499

Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed