CADClick

CVEs (7)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-41512	CADClick CADClick	Hig	0.57	8.8	0.01	Oct 4, 2024	A SQL Injection vulnerability in "ccHandler.aspx" in all versions of CADClick v.1.11.0 and before allows remote attackers to execute arbitrary SQL commands via the "bomid" parameter.
CVE-2025-25905	CADClick CADClick	Hig	0.46	7.1	0.00	Jun 25, 2025	Cross-Site Scripting (XSS) vulnerability in CADClick v1.13.0 and before allows remote attackers to inject arbitrary web script or HTML via the "tree" parameter.
CVE-2024-41516	CADClick CADClick	Med	0.35	5.4	0.00	Oct 4, 2024	A Reflected cross-site scripting (XSS) vulnerability in "ccHandler.aspx" CADClick <= 1.11.0 allows remote attackers to inject arbitrary web script or HTML via the "bomid" parameter.
CVE-2024-41515	CADClick CADClick	Med	0.35	5.4	0.00	Oct 4, 2024	A reflected cross-site scripting (XSS) vulnerability in "ccHandlerResource.ashx" in CADClick <= 1.11.0 allows remote attackers to inject arbitrary web script or HTML via the "res_url" parameter.
CVE-2024-41514	CADClick CADClick	Med	0.35	5.4	0.00	Oct 4, 2024	A reflected cross-site scripting (XSS) vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter.
CVE-2024-41513	CADClick CADClick	Med	0.35	5.4	0.00	Oct 4, 2024	A reflected cross-site scripting (XSS) vulnerability in "Artikel.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "searchindex" parameter.
CVE-2024-41511	CADClick CADClick	Low	0.25	3.9	0.01	Oct 4, 2024	A Path Traversal (Local File Inclusion) vulnerability in "BinaryFileRedirector.ashx" in CADClick v1.11.0 and before allows remote attackers to retrieve arbitrary local files via the "path" parameter.

CVE-2024-41512HigOct 4, 2024
CADClick
CADClick
risk 0.57cvss 8.8epss 0.01
A SQL Injection vulnerability in "ccHandler.aspx" in all versions of CADClick v.1.11.0 and before allows remote attackers to execute arbitrary SQL commands via the "bomid" parameter.
CVE-2025-25905HigJun 25, 2025
CADClick
CADClick
risk 0.46cvss 7.1epss 0.00
Cross-Site Scripting (XSS) vulnerability in CADClick v1.13.0 and before allows remote attackers to inject arbitrary web script or HTML via the "tree" parameter.
CVE-2024-41516MedOct 4, 2024
CADClick
CADClick
risk 0.35cvss 5.4epss 0.00
A Reflected cross-site scripting (XSS) vulnerability in "ccHandler.aspx" CADClick <= 1.11.0 allows remote attackers to inject arbitrary web script or HTML via the "bomid" parameter.
CVE-2024-41515MedOct 4, 2024
CADClick
CADClick
risk 0.35cvss 5.4epss 0.00
A reflected cross-site scripting (XSS) vulnerability in "ccHandlerResource.ashx" in CADClick <= 1.11.0 allows remote attackers to inject arbitrary web script or HTML via the "res_url" parameter.
CVE-2024-41514MedOct 4, 2024
CADClick
CADClick
risk 0.35cvss 5.4epss 0.00
A reflected cross-site scripting (XSS) vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter.
CVE-2024-41513MedOct 4, 2024
CADClick
CADClick
risk 0.35cvss 5.4epss 0.00
A reflected cross-site scripting (XSS) vulnerability in "Artikel.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "searchindex" parameter.
CVE-2024-41511LowOct 4, 2024
CADClick
CADClick
risk 0.25cvss 3.9epss 0.01
A Path Traversal (Local File Inclusion) vulnerability in "BinaryFileRedirector.ashx" in CADClick v1.11.0 and before allows remote attackers to retrieve arbitrary local files via the "path" parameter.