2 matches found
CVE-2014-3119
Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 searchstring parameter in the contacts module to index.php or allow remote attackers to execute arbitrary SQL commands via the updatekey parameter to ...
8.8CVSS9.1AI score0.01731EPSS
SaveExploits5References3
Sql injection
Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 searchstring parameter in the contacts module to index.php or allow remote attackers to execute arbitrary SQL commands via the updatekey parameter to ...
6.5CVSS8.7AI score0.01731EPSS
SaveExploits5References3Affected Software1
20