Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) database name, (2) table name, (3) ViewName, (4) view, (5) trigger, and (6) function fields in main.php and certain other files.
Search vulnerabilities
CVE-2007-1231
CVSS 2.0 · 4.3 Medium
EPSS 1.6%
KEV · Not listed
Vendors
Products
CVE-2009-4539
Cross-site scripting (XSS) vulnerability in main.php in SQLiteManager 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter.
CVSS 2.0 · 4.3 Medium
EPSS 1.7%
KEV · Not listed
Vendors
Products
CVE-2012-5105
Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary web script or HTML via the dbsel parameter to (1) main.php or (2) index.php; or (3) nsextt parameter to index.php.
CVSS 2.0 · 4.3 Medium
EPSS 5.1%
KEV · Not listed
Vendors
Products
CVE-2019-9083
SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. NOTE: This product is discontinued.
CVSS 3.0 · 9.8 Critical
EPSS 17.6%
KEV · Not listed
Vendors
Products
Page 1 of 1.