Search vulnerabilities

Results 2

Export CSV
CVE-2004-2144

Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php.

CVSS 2.0 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Products
CVE-2010-0611

Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products