Vulnerabilities > Maxxcode

DATE CVE VULNERABILITY TITLE RISK
2006-05-09 CVE-2006-2259 SQL Injection vulnerability in Maxxcode Maxxschedule 1.0
SQL injection vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to execute arbitrary SQL commands via the txtLogon parameter.
network
low complexity
maxxcode CWE-89
7.5
2006-05-09 CVE-2006-2258 Input Validation vulnerability in Maxxcode Maxxschedule 1.0
Cross-site scripting (XSS) vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to inject arbitrary web script or HTML via the Error parameter.
network
high complexity
maxxcode
2.6