SP
Vendor
Spotweb Project
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-43725 | SP Spotweb Spotweb Project | 6.1 | Mar 28 | There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remote attackers to inject arbitrary web script or HTML via the… |
| CVE-2021-33966 | SP Spotweb Spotweb Project | 5.4 | Jan 21 | Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request to the login page |
| CVE-2021-40973 | SP Spotweb Spotweb Project | 6.1 | Oct 1 | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the… |
| CVE-2021-40971 | SP Spotweb Spotweb Project | 6.1 | Oct 1 | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the… |
| CVE-2021-40972 | SP Spotweb Spotweb Project | 6.1 | Oct 1 | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the… |
| CVE-2021-40969 | SP Spotweb Spotweb Project | 6.1 | Oct 1 | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the… |
| CVE-2021-40970 | SP Spotweb Spotweb Project | 6.1 | Oct 1 | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the… |
| CVE-2021-40968 | SP Spotweb Spotweb Project | 6.1 | Oct 1 | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the… |
| CVE-2021-3286 | SP Spotweb Spotweb Project | 9.8 | Jan 26 | SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload may be used |
| CVE-2020-35545 | SP Spotweb Spotweb Project | 9.8 | Dec 17 | Time-based SQL injection exists in Spotweb 1.4.9 via the query string |