Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Bl@Ckbe@R

#18108de 53,634
15CVSS total
Vulnerabilidades · 2
Alta
2
PT-2009-4401
7.5
2009-06-05
Webcal · Webcal · CVE-2009-1945
Name of the Vulnerable Software and Affected Versions: WebCal version 3.04 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the `event id` parameter in the "webCal3 detail.asp" page. Recommendations: For WebCal version 3.04, consider restricting access to the `event id` parameter in the "webCal3 detail.asp" page until a patch is available. As a temporary workaround, avoid using the `event id` parameter in the affected page to minimize the risk of exploitation.
PT-2009-4406
7.5
2009-06-05
Webeyes · Webeyes Guest Book · CVE-2009-1950
Name of the Vulnerable Software and Affected Versions: WebEyes Guest Book version 3 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `mesajid` parameter in the "yorum.asp" file. Recommendations: For WebEyes Guest Book version 3, consider restricting access to the `yorum.asp` file or the `mesajid` parameter to minimize the risk of exploitation.