Search vulnerabilities

Results 2

Export CSV
CVE-2006-6776

Multiple SQL injection vulnerabilities in Future Internet allow remote attackers to execute arbitrary SQL commands via the (1) newsId or (2) categoryid parameter in a Portal.Showpage action in index.cfm, or (3) the langId parameter in index.cfm.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2006-6777

Cross-site scripting (XSS) vulnerability in index.cfm in Future Internet allows remote attackers to inject arbitrary web script or HTML via the categoryId parameter in a Portal.ShowPage action.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Vendors
Products