Vulnerabilities > Simplecustomer > Simple Customer > 1.2

DATE CVE VULNERABILITY TITLE RISK
2009-02-27 CVE-2008-6332 SQL Injection vulnerability in Simplecustomer Simple Customer 1.2
SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter.
network
low complexity
simplecustomer CWE-89
7.5
2009-02-06 CVE-2008-6081 SQL Injection vulnerability in Simplecustomer Simple Customer 1.2
SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
network
low complexity
simplecustomer CWE-89
7.5