Preprojects - vulnerabilities (CVEs)

29 CVEs in 14 products, 0 in the last 30 days, newest from 2012-10-08.

Products

Newest CVEs of Preprojects

CVE-2012-5333 - CVSS 7.5 (high), 2012-10-08: SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2012-5334 - CVSS 7.5 (high), 2012-10-08: SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the pid parameter.
CVE-2011-5139 - CVSS 7.5 (high), 2012-08-31: SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2010-4776 - CVSS 7.5 (high), 2011-03-23: SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers to execute arbitrary SQL commands via…
CVE-2010-1371 - CVSS 4.3 (medium), 2010-04-13: Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2010-1370 - CVSS 7.5 (high), 2010-04-13: SQL injection vulnerability in detailad.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the siteid parameter.
CVE-2010-1369 - CVSS 7.5 (high), 2010-04-13: SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the email parameter.
CVE-2010-0954 - CVSS 7.5 (high), 2010-03-10: SQL injection vulnerability in search_result.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the…
CVE-2008-7052 - CVSS 6.5 (medium), 2009-08-24: Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authenticated users to execute arbitrary code by…
CVE-2008-6888 - CVSS 4.3 (medium), 2009-08-03: Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings 1.0 allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2008-6887 - CVSS 7.5 (high), 2009-08-03: SQL injection vulnerability in detailad.asp in Pre Classified Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the siteid parameter.
CVE-2008-6798 - CVSS 7.5 (high), 2009-05-07: Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via (1)…
CVE-2008-6796 - CVSS 7.5 (high), 2009-05-07: SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the…
CVE-2008-6716 - CVSS 7.5 (high), 2009-04-13: homeadmin/adminhome.php in Pre ADS Portal 2.0 and earlier does not require administrative authentication, which allows remote attackers to have an unspecified…
CVE-2008-6715 - CVSS 4.3 (medium), 2009-04-13: Multiple cross-site scripting (XSS) vulnerabilities in Pre ADS Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the…
CVE-2008-6230 - CVSS 7.5 (high), 2009-02-20: SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-6231 - CVSS 7.5 (high), 2009-02-20: Pre Classified Listing PHP allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid…
CVE-2008-6232 - CVSS 7.5 (high), 2009-02-20: Pre Shopping Mall allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to…
CVE-2008-6053 - CVSS 5 (medium), 2009-02-04: PreProjects Pre Resume Submitter stores onlineresume.mdb under the web root with insufficient access control, which allows remote attackers to obtain…
CVE-2008-6052 - CVSS 5 (medium), 2009-02-04: PreProjects Pre E-Learning Portal stores db_elearning.mdb under the web root with insufficient access control, which allows remote attackers to obtain…
CVE-2008-6055 - CVSS 5 (medium), 2009-02-04: PreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords…
CVE-2008-5977 - CVSS 7.5 (high), 2009-01-27: SQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the adname parameter…
CVE-2008-5976 - CVSS 4.3 (medium), 2009-01-27: Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers to inject arbitrary web script or…
CVE-2008-4177 - CVSS 7.5 (high), 2008-09-23: SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter.
CVE-2008-2915 - CVSS 7.5 (high), 2008-06-30: Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php (aka the search module) in Pre Job Board allow remote attackers to execute arbitrary SQL…
CVE-2008-2917 - CVSS 7.5 (high), 2008-06-30: SQL injection vulnerability in productsofcat.asp in E-SMART CART allows remote attackers to execute arbitrary SQL commands via the category_id parameter.
CVE-2008-2914 - CVSS 7.5 (high), 2008-06-30: SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL…
CVE-2008-2916 - CVSS 6.8 (medium), 2008-06-30: Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL…
CVE-2008-2114 - CVSS 7.5 (high), 2008-05-08: SQL injection vulnerability in emall/search.php in Pre Shopping Mall 1.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.