Envolution - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2007-08-08.

Products

• Envolution - 4 CVEs

Newest CVEs of Envolution

• CVE-2007-4253 - CVSS 7.5 (high), 2007-08-08: SQL injection vulnerability in the News module in modules.php in Envolution 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via…
• CVE-2006-6445 - CVSS 7.5 (high), 2006-12-10: Directory traversal vulnerability in error.php in Envolution 1.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a ..…
• CVE-2005-4263 - CVSS 7.5 (high), 2005-12-15: SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands via the (1) startrow and (2) catid…
• CVE-2005-4262 - CVSS 4.3 (medium), 2005-12-15: Cross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the (1) startrow…