Spotweb Project Spotweb
10 CVEs affecting Spotweb Project Spotweb. Latest disclosed: 2022-03-28. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-3286 | Critical | 9.8 | 2021-01-26 | SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload may be used. NOTE: th… |
CVE-2020-35545 | Critical | 9.8 | 2020-12-17 | Time-based SQL injection exists in Spotweb 1.4.9 via the query string. |
CVE-2021-43725 | Medium | 6.1 | 2022-03-28 | There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remote attackers to inject arbitrary web scr… |
CVE-2021-40973 | Medium | 6.1 | 2021-10-01 | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web scri… |
CVE-2021-40972 | Medium | 6.1 | 2021-10-01 | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web scri… |
CVE-2021-40971 | Medium | 6.1 | 2021-10-01 | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web scri… |
CVE-2021-40970 | Medium | 6.1 | 2021-10-01 | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web scri… |
CVE-2021-40969 | Medium | 6.1 | 2021-10-01 | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web scri… |
CVE-2021-40968 | Medium | 6.1 | 2021-10-01 | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web scri… |
CVE-2021-33966 | Medium | 5.4 | 2022-01-21 | Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request to the login page. |