VYPR
← Preprojects

Vendor CVEs

Preprojects

All CVEs

48 total · sorted by risk
  • CVE-2012-5334Oct 8, 2012
    Preprojects
    Pre Printing Press
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the pid parameter.

  • CVE-2012-5333Oct 8, 2012
    Pre Printing Press
    Pre Printing Press
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2011-5139Aug 31, 2012
    Preprojects
    Business Cards Designer
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-4959Oct 9, 2011
    Preprojects
    Pre Podcast Portal
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the password parameter.

  • CVE-2010-4776Mar 23, 2011
    Preprojects
    Pre Online Tests Generator
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers to execute arbitrary SQL commands via the tid2 parameter.

  • CVE-2010-1369Apr 13, 2010
    Preprojects
    Pre Classified Listings Asp
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the email parameter.

  • CVE-2008-7052Aug 24, 2009
    Preprojects
    Pre Real Estate Listings
    risk 0.03cvss —epss 0.03

    Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in…

  • CVE-2008-6888Aug 3, 2009
    Pre Classified Listings
    Pre Classified Listings
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings 1.0 allows remote attackers to inject arbitrary web script or HTML via the address parameter.

  • CVE-2008-6887Aug 3, 2009
    Pre Classified Listings
    Pre Classified Listings
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in detailad.asp in Pre Classified Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the siteid parameter.

  • CVE-2008-6847Jul 2, 2009
    Pre ASP
    Job Board
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Employee/emp_login.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

  • CVE-2008-6798May 7, 2009
    Preprojects
    Pre Real Estate Listings
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via (1) the us parameter (aka the Username field) or (2) the ps parameter (aka the Password field).

  • CVE-2008-6796May 7, 2009
    Preprojects
    Pre Real Estate Listings
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter (aka the Admin field or Username field).

  • CVE-2008-6716Apr 13, 2009
    Pre ADS Portal
    Pre ADS Portal
    risk 0.03cvss —epss 0.02

    homeadmin/adminhome.php in Pre ADS Portal 2.0 and earlier does not require administrative authentication, which allows remote attackers to have an unspecified impact via a direct request.

  • CVE-2008-6715Apr 13, 2009
    Pre ADS Portal
    Pre ADS Portal
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Pre ADS Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) homeadmin/adminhome.php and (2) homeadmin/signinform.php.

  • CVE-2008-6329Feb 27, 2009
    Pre ASP
    Job Board
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password parameters, as reachable from Employee/emp_login.asp. NOTE: some of these details are obtained from third party…

  • CVE-2008-6232Feb 20, 2009
    Pre Shopping Mall
    Pre Shopping Mall
    risk 0.03cvss —epss 0.03

    Pre Shopping Mall allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".

  • CVE-2008-6231Feb 20, 2009
    Preprojects
    Pre Classified Listings
    risk 0.03cvss —epss 0.03

    Pre Classified Listing PHP allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".

  • CVE-2008-6230Feb 20, 2009
    Preprojects
    Pre Podcast Portal
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2008-6228Feb 20, 2009
    Pre Multi Vendor Shopping Malls
    Pre Multi-Vendor Shopping Malls
    risk 0.03cvss —epss 0.03

    Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".

  • CVE-2008-6227Feb 20, 2009
    Pre Multi Vendor Shopping Malls
    Pre Multi-Vendor Shopping Malls
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in buyer_detail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the (1) sid and (2) cid parameters.

  • CVE-2008-6226Feb 20, 2009
    Preprojects
    PHP Auto Listings Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the itemno parameter.

  • CVE-2008-5977Jan 27, 2009
    PHP JOBWEBSITE PRO
    PHP JOBWEBSITE PRO
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the adname parameter in a Submit action.

  • CVE-2008-5976Jan 27, 2009
    PHP JOBWEBSITE PRO
    PHP JOBWEBSITE PRO
    risk 0.03cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers to inject arbitrary web script or HTML via (1) the adname parameter in a Submit action or (2) the UserName field.

  • CVE-2008-5058Nov 13, 2008
    Simple CMS
    Simple CMS
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary SQL commands via the user parameter, as reachable from siteadmin/adminlogin.php. NOTE: some of these details are obtained from third party information.

  • CVE-2008-4177Sep 23, 2008
    Preprojects
    Pre Real Estate Listings
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter.

  • CVE-2008-3310Jul 25, 2008
    Preprojects
    Pre Survey Poll
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid parameter.

  • CVE-2008-2916Jun 30, 2008
    Pre ADS Portal
    Pre ADS Portal
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to showcategory.php and the (2) id parameter to software-description.php.

  • CVE-2008-2917Jun 30, 2008
    Preprojects
    E Smart Cart
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in productsofcat.asp in E-SMART CART allows remote attackers to execute arbitrary SQL commands via the category_id parameter.

  • CVE-2008-2914Jun 30, 2008
    PHP JOBWEBSITE PRO
    PHP JOBWEBSITE PRO
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the (1) kw or (2) position parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2008-2915Jun 30, 2008
    Preprojects
    Pre Job Board
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php (aka the search module) in Pre Job Board allow remote attackers to execute arbitrary SQL commands via the (1) position or (2) kw parameter.

  • CVE-2008-2114May 8, 2008
    Pre Shopping Mall
    Pre Shopping Mall
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in emall/search.php in Pre Shopping Mall 1.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.

  • CVE-2008-0744Feb 13, 2008
    Preprojects
    Pre Hotels \& Resorts Management System
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in user_login.asp in PreProjects.com Pre Hotels & Resorts Management System allows remote attackers to execute arbitrary SQL commands via the login page.

  • CVE-2007-4762Sep 8, 2007
    E SMARTCART
    E-SMARTCART
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in embadmin/login.asp in E-SMARTCART 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) pass fields, different vectors than CVE-2007-0092.

  • CVE-2007-2675May 14, 2007
    Preprojects
    Pre Classifieds Listings
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter.

  • CVE-2007-2674May 14, 2007
    Preprojects
    Pre Shopping Mall
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the prodid parameter.

  • CVE-2007-0092Jan 5, 2007
    E SMARTCART
    E-SMARTCART
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL commands via the product_id parameter.

  • CVE-2006-2763Jun 2, 2006
    Preprojects
    Pre News Manager
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, (c) email_story.php, (d) thankyou.php, (e) printable_view.php, (f)…

  • CVE-2014-5799Sep 9, 2014
    Nonghyup
    Smart Card
    risk 0.00cvss —epss 0.00

    The smart.card (aka nh.smart.card) application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2010-1371Apr 13, 2010
    Preprojects
    Pre Classified Listings Asp
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to inject arbitrary web script or HTML via the address parameter.

  • CVE-2010-1370Apr 13, 2010
    Preprojects
    Pre Classified Listings Asp
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in detailad.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the siteid parameter.

  • CVE-2010-0954Mar 10, 2010
    Preprojects
    Pre E Learning Portal
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in search_result.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the course_ID parameter.

  • CVE-2008-6055Feb 4, 2009
    Preprojects
    Pre Classified Listings
    risk 0.00cvss —epss 0.01

    PreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request.

  • CVE-2008-6054Feb 4, 2009
    Preprojects
    Pre Courier And Cargo Business
    risk 0.00cvss —epss 0.01

    PreProjects Pre Courier and Cargo Business stores dbcourior.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request.

  • CVE-2008-6053Feb 4, 2009
    Preprojects
    Pre Resume Submitter
    risk 0.00cvss —epss 0.01

    PreProjects Pre Resume Submitter stores onlineresume.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request.

  • CVE-2008-6052Feb 4, 2009
    Preprojects
    Pre E Learning Portal
    risk 0.00cvss —epss 0.01

    PreProjects Pre E-Learning Portal stores db_elearning.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request.

  • CVE-2008-0543Feb 1, 2008
    Pre Dynamic Institution
    Pre Dynamic Institution
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Pre Dynamic Institution allow remote attackers to execute arbitrary SQL commands via the (1) sloginid and (2) spass parameters to (a) login.asp and (b) siteadmin/login.asp. NOTE: some of these details are obtained from third party…

  • CVE-2006-2678May 31, 2006
    Preprojects
    Pre News Manager
    risk 0.00cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in Pre News Manager 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, (c) email_story.php, (d) thankyou.php, (e)…

  • CVE-2006-2669May 30, 2006
    Pre Shopping Mall
    Pre Shopping Mall
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter in search.php (the "search box"), (2) the prodid parameter in detail.php, and the (3) cid parameter in…