Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Candypress Store HIGH 7.5

CVE-2008-0737

SQL injection vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and other 4.x and 3.x versions, allows remote attackers to…

No fix yet

Fix from $1,950 2008-02-13

Candypress Store HIGH 7.5

CVE-2008-0738

Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL comma…

Fix: after 4.1

Fix from $1,950 2008-02-13

Candypress Store HIGH 7.5

CVE-2008-0739

SQL injection vulnerability in admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and earlier 4.x and 3.x versions, allows remote attackers to …

Fix: after 4.1

Fix from $1,950 2008-02-13

Candypress Store MEDIUM 5.0

CVE-2008-0736

admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and possibly other 4.x and 3.x versions, allows remote attackers to obtain the path via a ce…

No fix yet

Fix from $1,600 2008-02-13

Candypress Store HIGH 7.5

CVE-2008-0546

Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL comma…

No fix yet

Fix from $1,950 2008-02-01