Valarsoft Webmatic Multiple XSS and SQL Injection Vulnerabilities

Valarsoft Webmatic is prone to multiple Cross-Site Scripting and SQL Injection vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Valarsoft Webmatic Version Detection

This script finds the running Valarsoft Webmatic version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4380

Multiple SQL injection vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, a different issue than CVE-2008-2925...

CVE-2009-4379

Multiple cross-site scripting XSS vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-2924...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-2924...

Sql injection

Multiple SQL injection vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, a different issue than CVE-2008-2925...

CVE-2009-4379

Valarsoft Webmatic is affected by CVE-2009-4379: multiple Cross-Site Scripting (XSS) vulnerabilities in Webmatic before 3.0.3 that allow remote attackers to inject arbitrary scripts/HTML via unspecified vectors. The vulnerability is documented across sources such as NVD and OpenVAS; CVSS v2 base ...

CVE-2009-4380

Valarsoft Webmatic is affected by CVE-2009-4380: multiple SQL injection vulnerabilities in Webmatic before version 3.0.3. The root cause is SQL injection via unspecified vectors, enabling remote attackers to execute arbitrary SQL commands. The CVE is referenced across multiple sources (NVD, Red H...

CVE-2009-4379

Multiple cross-site scripting XSS vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-2924...

CVE-2009-4380

Multiple SQL injection vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, a different issue than CVE-2008-2925...

CVE-2009-4379: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-2924...

CVE-2009-4380: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, a different issue than CVE-2008-2925...

CVE-2008-2924

Cross-site scripting XSS vulnerability in Webmatic before 2.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in Webmatic before 2.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-2925

SQL injection vulnerability in Webmatic before 2.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Webmatic before 2.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-2924

Technical details about CVE-2008-2924 are not provided in the supplied documents; no affected versions, vectors, or fixes are specified. Monitor for official disclosures for updates.

CVE-2008-2924

Cross-site scripting XSS vulnerability in Webmatic before 2.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-2925

SQL injection vulnerability in Webmatic before 2.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-2925

CVE-2008-2925 affects Webmatic before 2.8. It is a SQL injection vulnerability allowing remote execution of arbitrary SQL commands via unspecified vectors. Connected sources confirm the vendor/product and vulnerability class, but no explicit exploit details or patch/version remediation are provid...