High

DATE	CVE	VULNERABILITY TITLE	RISK
2010-01-04	CVE-2009-4551	SQL Injection vulnerability in Intesync Miniweb 2.0 SQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the campaign_id parameter in a results action to index.php. network low complexity intesync CWE-89	7.5
2009-09-25	CVE-2009-3419	SQL Injection vulnerability in Intesync Miniweb 2.0 SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter. network low complexity intesync CWE-89	7.5