Export limit exceeded: 11555 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2006-5934

SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the UserName field.

CVSS 2.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Iexpress
Products
Estate Agent Manager
CVE-2007-3966

SQL injection vulnerability in Munch Pro allows remote attackers to execute arbitrary SQL commands via the login field to /admin, a different vulnerability than CVE-2006-5880.

CVSS 2.0 · 5.0 Medium EPSS 1.0% KEV · Not listed
Vendors
Iexpress
Products
Munch Pro
CVE-2007-3992

SQL injection vulnerability in vir_login.asp in iExpress Property Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the Username parameter is covered by CVE-2006-6029. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Iexpress
Products
Property Pro