Simplecustomer - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2009-05-15.

Products

• Simple Customer - 4 CVEs

Newest CVEs of Simplecustomer

• CVE-2009-1637 - CVSS 6.4 (medium), 2009-05-15: profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and…
• CVE-2008-6332 - CVSS 7.5 (high), 2009-02-27: SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter.
• CVE-2008-6326 - CVSS 7.5 (high), 2009-02-27: SQL injection vulnerability in login.php in Simple Customer as downloaded on 20081118 allows remote attackers to execute arbitrary SQL commands via the email…
• CVE-2008-6081 - CVSS 7.5 (high), 2009-02-06: SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.