SP
Product
Spotweb
by Spotweb Project · last CVE Mar 28, 2022
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 8Low 0
Watch

Add Spotweb to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-3286
9.8
1%
Jan 26
SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload may be used
Affected: 1.4.9
CVE-2020-35545
9.8
4%
Dec 17
Time-based SQL injection exists in Spotweb 1.4.9 via the query string
Affected: 1.4.9
Showing 2