Vulnerabilities > Easy Clanpage > Easy Clanpage > 2.2

DATE CVE VULNERABILITY TITLE RISK
2008-03-25 CVE-2008-1494 SQL Injection vulnerability in Easy-Clanpage 2.2
SQL injection vulnerability in inc/module/online.php in Easy-Clanpage 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a user details action, a different vector than CVE-2008-1425.
network
low complexity
easy-clanpage CWE-89
7.5
2008-03-20 CVE-2008-1425 SQL Injection vulnerability in Easy-Clanpage 2.2
SQL injection vulnerability in index.php in the gallery module in Easy-Clanpage 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a kate action.
network
low complexity
easy-clanpage CWE-89
7.5