Vulnerabilities > Variomat

DATE CVE VULNERABILITY TITLE RISK
2006-06-01 CVE-2006-2721 Cross-Site Scripting vulnerability in Variomat
Cross-site scripting (XSS) vulnerability in news.php in VARIOMAT allows remote attackers to inject arbitrary HTML or web script via the subcat parameter.
network
variomat
6.8
2006-06-01 CVE-2006-2720 SQL-Injection vulnerability in Variomat
SQL injection vulnerability in news.php in VARIOMAT allows remote attackers to execute arbitrary SQL commands via the subcat parameter.
network
low complexity
variomat
7.5