Vulnerabilities > Datachecknh
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2009-07-27 | CVE-2009-2619 | SQL Injection vulnerability in Datachecknh V-Spacepal SQL injection vulnerability in login.asp in DataCheck Solutions V-SpacePal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 7.5 |
2009-07-27 | CVE-2009-2616 | SQL Injection vulnerability in Datachecknh Sitepal 1.0 SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 7.5 |
2009-07-27 | CVE-2009-2615 | Cross-Site Scripting vulnerability in Datachecknh Sitepal 1.1 Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) z_admin_login.asp, (2) z_forgot.asp, and possibly unspecified other components. | 4.3 |
2009-07-27 | CVE-2009-2614 | SQL Injection vulnerability in Datachecknh Linkpal 1.0 SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions LinkPal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 7.5 |
2009-07-27 | CVE-2009-2613 | Cross-Site Scripting vulnerability in Datachecknh Linkpal 1.0 Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions LinkPal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) z_loginfailed.asp, (2) z_admin_login.asp, (3) z_forgot.asp, and possibly unspecified other components. | 4.3 |
2009-07-08 | CVE-2009-2366 | SQL Injection vulnerability in Datachecknh Forumpal and Forumpal FE SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the (1) password parameter in 1.1 and (2) p_password parameter in 1.5. | 7.5 |
2009-07-08 | CVE-2009-2365 | SQL Injection vulnerability in Datachecknh Gallerypal FE 1.5 SQL injection vulnerability in login.asp in DataCheck Solutions GalleryPal FE 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 7.5 |