Sqlitemanager

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-9083 CRITICAL POC THREAT Act Now

SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Sqlitemanager

NVD Exploit-DB

CVSS 3.0

9.8

EPSS

17.6%

CVE-2012-5105 MEDIUM POC THREAT This Month

Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary web script or HTML via the dbsel parameter to (1) main.php or (2) index.php; or. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 11.1%.

PHP XSS Sqlitemanager

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

11.1%

CVE-2019-9083

EPSS 18% CVSS 9.8

CRITICAL POC THREAT Act Now

SQLi PHP Sqlitemanager

NVD Exploit-DB

CVE-2012-5105

EPSS 11% CVSS 4.3

MEDIUM POC THREAT This Month

PHP XSS Sqlitemanager

NVD Exploit-DB