3 matches found
EUVD-2007-6399
Malware in sbrugna...
7.5CVSS6.1AI score0.03231EPSS
SaveExploits1References13
EJBQL injection via 'order' parameter
The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter...
7.5CVSS6.1AI score0.03231EPSS
SaveExploits1References4
CVE-2007-6433: Improper Input Validation
The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter...
7.5CVSS6.3AI score0.03231EPSS
SaveExploits1References2
20