Login Request a demo
SP
Product
Spotweb
by Spotweb Project · last CVE Mar 28, 2022
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 2High 0Medium 8Low 0
Severity
All severities10Critical2High0Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Spotweb to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-3286
9.8
1%
Jan 26
SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload may be used
Affected: 1.4.9
CVE-2020-35545
9.8
4%
Dec 17
Time-based SQL injection exists in Spotweb 1.4.9 via the query string
Affected: 1.4.9
CVE-2021-43725
6.1
3%
Mar 28
There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remote attackers to inject arbitrary web script or HTML via the…
Affected: through 1.5.1
CVE-2021-40973
6.1
2%
Oct 1
Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the…
Affected: through 1.5.1
CVE-2021-40972
6.1
2%
Oct 1
Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the…
Affected: through 1.5.1
CVE-2021-40971
6.1
2%
Oct 1
Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the…
Affected: through 1.5.1
CVE-2021-40970
6.1
2%
Oct 1
Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the…
Affected: through 1.5.1
CVE-2021-40969
6.1
2%
Oct 1
Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the…
Affected: through 1.5.1
CVE-2021-40968
6.1
2%
Oct 1
Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the…
Affected: through 1.5.1
CVE-2021-33966
5.4
1%
Jan 21
Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request to the login page
Affected: 1.4.9
Showing 10