Vulnerabilities > SME

DATE CVE VULNERABILITY TITLE RISK
2007-01-19 CVE-2007-0350 SQL Injection vulnerability in SME Filemailer
Multiple SQL injection vulnerabilities in (a) index.php and (b) dl.php in SmE FileMailer 1.21 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ps, (2) us, (3) f, or (4) code parameter.
network
low complexity
sme CWE-89
7.5
2007-01-18 CVE-2007-0346 SQL-Injection vulnerability in SME Filemailer 1.21
SQL injection vulnerability in index.php in SmE FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the us parameter.
network
low complexity
sme
7.5