Vulnerabilities > Vice

DATE CVE VULNERABILITY TITLE RISK
2024-11-11 CVE-2024-11021 Cross-site Scripting vulnerability in Vice Webopac 7.1.20160701
Webopac from Grand Vice info has Stored Cross-site Scripting vulnerability.
network
low complexity
vice CWE-79
5.4
2024-11-11 CVE-2024-11016 SQL Injection vulnerability in Vice Webopac 7.1.20160701
Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and delete database contents.
network
low complexity
vice CWE-89
critical
9.8
2024-11-11 CVE-2024-11019 Cross-site Scripting vulnerability in Vice Webopac 7.1.20160701
Webopac from Grand Vice info has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript code in the user's browser through phishing techniques.
network
low complexity
vice CWE-79
6.1