CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 2CVE-2008-1641 – EfesTECH Video 5.0 - 'catID' SQL Injection
https://notcve.org/view.php?id=CVE-2008-1641
SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL commands via the catID parameter. Vulnerabilidad de inyección SQL en default.asp de EfesTECH Video 5.0, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro catID. • https://www.exploit-db.com/exploits/31582 http://secunia.com/advisories/29611 http://securityreason.com/securityalert/3791 http://www.securityfocus.com/archive/1/490309/100/0/threaded http://www.securityfocus.com/bid/28532 https://exchange.xforce.ibmcloud.com/vulnerabilities/41550 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 3CVE-2008-1508 – Efestech E-Kontor - 'id' SQL Injection
https://notcve.org/view.php?id=CVE-2008-1508
SQL injection vulnerability in EfesTech E-Kontör and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. La vulnerabilidad de inyección SQL en EfesTech E-Kontör y versiones anteriores permite a los atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id. • https://www.exploit-db.com/exploits/31476 http://secunia.com/advisories/29499 http://securityreason.com/securityalert/3776 http://www.securityfocus.com/archive/1/489989/100/0/threaded http://www.securityfocus.com/bid/28412 https://exchange.xforce.ibmcloud.com/vulnerabilities/41419 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 11%CPEs: 1EXPL: 1CVE-2007-2662 – EfesTECH Haber 5.0 - 'id' SQL Injection
https://notcve.org/view.php?id=CVE-2007-2662
SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to the top-level URI. Vulnerabilidad de inyección SQL en EfesTECH Haber 5.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en el nivel más alto del Identificador Uniforme de Recurso (URI). • https://www.exploit-db.com/exploits/3911 http://osvdb.org/36014 http://secunia.com/advisories/25247 http://www.securityfocus.com/bid/23960 https://exchange.xforce.ibmcloud.com/vulnerabilities/34272 •