| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-1408 | 4.3 |
Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags,
|
10-10-2018 - 19:36 | 24-04-2009 - 14:30 | |
| CVE-2009-1912 | 6.8 |
Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute arbitrary local .php files via a .. (dot dot) in a language cookie. NOTE: this can be leveraged for SQL injection
|
29-09-2017 - 01:34 | 04-06-2009 - 16:30 | |
| CVE-2010-4861 | 7.5 |
SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
|
29-08-2017 - 01:29 | 05-10-2011 - 10:55 | |
| CVE-2006-0728 | 7.5 |
SQL injection vulnerability in search.php in webSPELL 4.01.00 and earlier allows remote attackers to inject arbitrary SQL commands via the title_op parameter.
|
20-07-2017 - 01:30 | 16-02-2006 - 11:02 |