Search vulnerabilities

Results 2

Export CSV
CVE-2009-4198

SQL injection vulnerability in my_orders.php in MyMiniBill allows remote authenticated users to execute arbitrary SQL commands via the orderid parameter in a status action.

CVSS 2.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2005-0574

Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the URL.

CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Vendors
Products