Icash Click Email vulnerabilities
2 known vulnerabilities affecting icash/click_email.
Total CVEs
2
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
HIGH1LOW1
Vulnerabilities
Page 1 of 1
CVE-2008-5892P3HIGHCVSS 7.5PoCv_nil_2009-01-12
CVE-2008-5892 [HIGH] CWE-89 CVE-2008-5892: Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary
Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL commands via (1) the ID parameter to admin_dblayers.asp in an update action, (2) the adminid parameter to admin_loginCheck.asp (aka the USERNAME field in admin_main.asp), and (3) the PassWord parameter to admin_loginCheck.asp (aka the PASSWORD field in
nvd
CVE-2008-5893P4LOWCVSS 2.6PoCv_nil_2009-01-12
CVE-2008-5893 [LOW] CWE-79 CVE-2008-5893: Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attack
Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inject arbitrary web script or HTML via the tablename parameter in an update action.
nvd