2012-01-23

2012-01-24

2012-01-25

All (3) Critical (3) High (3) Medium (12)

CVE-2012-0913 HIGH POC This Week

SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL commands via the passw parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Ictimeattendance

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

0.3%

CVE-2012-0069 HIGH This Week

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Batavi

NVD

CVSS 2.0

7.5

EPSS

0.7%

CVE-2012-0912 HIGH This Week

SQL injection vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Webnetwork

NVD

CVSS 2.0

7.5

EPSS

0.3%