cbcvebase.

Geodesicsolutions Geocore Max vulnerabilities

1 known vulnerability affecting geodesicsolutions/geocore_max.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2014-3871P3HIGHCVSS 7.5PoCv7.3.32014-05-27
CVE-2014-3871 [HIGH] CVE-2014-3871: Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 (form Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 (formerly GeoClassifieds and GeoAuctions) allow remote attackers to execute arbitrary SQL commands via the (1) c[password] or (2) c[username] parameter. NOTE: the b parameter to index.php vector is already covered by CVE-2006-3823.
nvd
Geodesicsolutions Geocore Max vulnerabilities | cvebase