← Back

Ultra Plus

ultra_plus

Vendor: Cj • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-4241
1Cj
1Ultra Plus
Apr 23, 2026
Sep 25, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie.
CVE-2005-1506
1Cj
1Ultra Plus
Apr 16, 2026
May 11, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in out.php in CJ Ultra (CJUltra) Plus 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via the perm parameter.