Search vulnerabilities

Results 2

Export CSV
CVE-2006-6080

Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary SQL commands via the (1) catID or (2) editorID parameter.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Products
CVE-2008-5606

Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for qmail.mdb.

CVSS 2.0 · 5.0 Medium EPSS 2.6% KEV · Not listed