VYPR
← All vendors
Vendor

Preprojects

Products
23
CVEs
48
Across products
48
Status
Private

Products

23

Recent CVEs

48
View all 48 CVEs →
  • CVE-2012-5334Oct 8, 2012
    Preprojects
    Pre Printing Press
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the pid parameter.

  • CVE-2012-5333Oct 8, 2012
    Pre Printing Press
    Pre Printing Press
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2011-5139Aug 31, 2012
    Preprojects
    Business Cards Designer
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-4959Oct 9, 2011
    Preprojects
    Pre Podcast Portal
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the password parameter.

  • CVE-2010-4776Mar 23, 2011
    Preprojects
    Pre Online Tests Generator
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers to execute arbitrary SQL commands via the tid2 parameter.

  • CVE-2010-1369Apr 13, 2010
    Preprojects
    Pre Classified Listings Asp
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the email parameter.

  • CVE-2008-7052Aug 24, 2009
    Preprojects
    Pre Real Estate Listings
    risk 0.03cvss —epss 0.03

    Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in…

  • CVE-2008-6888Aug 3, 2009
    Pre Classified Listings
    Pre Classified Listings
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings 1.0 allows remote attackers to inject arbitrary web script or HTML via the address parameter.

  • CVE-2008-6887Aug 3, 2009
    Pre Classified Listings
    Pre Classified Listings
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in detailad.asp in Pre Classified Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the siteid parameter.

  • CVE-2008-6847Jul 2, 2009
    Pre ASP
    Job Board
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Employee/emp_login.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

  • CVE-2008-6798May 7, 2009
    Preprojects
    Pre Real Estate Listings
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via (1) the us parameter (aka the Username field) or (2) the ps parameter (aka the Password field).

  • CVE-2008-6796May 7, 2009
    Preprojects
    Pre Real Estate Listings
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter (aka the Admin field or Username field).

  • CVE-2008-6716Apr 13, 2009
    Pre ADS Portal
    Pre ADS Portal
    risk 0.03cvss —epss 0.02

    homeadmin/adminhome.php in Pre ADS Portal 2.0 and earlier does not require administrative authentication, which allows remote attackers to have an unspecified impact via a direct request.

  • CVE-2008-6715Apr 13, 2009
    Pre ADS Portal
    Pre ADS Portal
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Pre ADS Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) homeadmin/adminhome.php and (2) homeadmin/signinform.php.

  • CVE-2008-6329Feb 27, 2009
    Pre ASP
    Job Board
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password parameters, as reachable from Employee/emp_login.asp. NOTE: some of these details are obtained from third party…

  • CVE-2008-6232Feb 20, 2009
    Pre Shopping Mall
    Pre Shopping Mall
    risk 0.03cvss —epss 0.03

    Pre Shopping Mall allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".

  • CVE-2008-6231Feb 20, 2009
    Preprojects
    Pre Classified Listings
    risk 0.03cvss —epss 0.03

    Pre Classified Listing PHP allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".

  • CVE-2008-6230Feb 20, 2009
    Preprojects
    Pre Podcast Portal
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2008-6228Feb 20, 2009
    Pre Multi Vendor Shopping Malls
    Pre Multi-Vendor Shopping Malls
    risk 0.03cvss —epss 0.03

    Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".

  • CVE-2008-6227Feb 20, 2009
    Pre Multi Vendor Shopping Malls
    Pre Multi-Vendor Shopping Malls
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in buyer_detail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the (1) sid and (2) cid parameters.

View all 48 CVEs →