Vulnerabilities > Controlsystemworks

DATE CVE VULNERABILITY TITLE RISK
2014-05-20 CVE-2014-2351 SQL Injection vulnerability in Controlsystemworks Csworks
SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained in web API requests.
network
low complexity
controlsystemworks CWE-89
7.5
2011-11-03 CVE-2011-3996 Resource Management Errors vulnerability in Controlsystemworks Csworks
The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service (service crash) via crafted TCP packets.
network
low complexity
controlsystemworks CWE-399
5.0