Vulnerabilities > Swsoft > Confixx > 3.1.2
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2006-04-13 | CVE-2006-1759 | Cross-Site Scripting vulnerability in Swsoft Confixx 3.1.2 Cross-site scripting (XSS) vulnerability in allgemein_transfer.php in SWSoft Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the jahr parameter. | 2.6 |
2006-04-13 | CVE-2006-1754 | SQL Injection vulnerability in Swsoft Confixx 3.0.6/3.0.8/3.1.2 SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute arbitrary SQL commands via the SID parameter. | 7.5 |