High

DATE	CVE	VULNERABILITY TITLE	RISK
2006-12-07	CVE-2006-6354	Software SQL Injection vulnerability in DUware Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote attackers to execute arbitrary SQL commands via the (1) iNews, (2) iType, or (3) Action parameter. network low complexity duware	7.5
2005-12-03	CVE-2005-3976	Software SQL Injection vulnerability in DUware SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.1, (6) DUgallery 3.3, (7) DUnews 1.1, and (8) DUpaypal 3.1 and DUpaypal Pro 3.0, allows remote attackers to execute arbitrary SQL commands via the iType parameter. network low complexity duware	7.5
2005-06-22	CVE-2005-2047	SQL-Injection vulnerability in Duware Dupaypal PRO 3.0 Multiple SQL injection vulnerabilities in DUware DUpaypal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iPro parameter to detail.asp, (3) iSub parameter to sub.asp, (4) iCat parameter to catEdit.asp. network low complexity duware	7.5