Collector Mycolex
3 CVEs affecting Collector Mycolex. Latest disclosed: 2009-05-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-1825 | | 2009-05-29 | modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated users to list user accounts via a Find a… | |
CVE-2009-1810 | | 2009-05-29 | Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1) the formUser parameter (aka the Name f… | |
CVE-2009-1809 | | 2009-05-29 | Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the year parameter t… |