Baalsystems : Security Vulnerabilities, CVEs, CVSS score >= 3
Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
Max CVSS
7.5
EPSS Score
0.06%
Published
2010-02-11
Updated
2017-08-17
Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php.
Max CVSS
7.5
EPSS Score
0.87%
Published
2004-12-31
Updated
2024-01-25
2 vulnerabilities found