Dbninja

dbninja

3 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-7748 1Dbninja 1Dbninja Jun 17, 2026 Feb 11, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 _includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if _users/admin/tasks.php exists.
CVE-2019-7747 1Dbninja 1Dbninja Jun 17, 2026 Feb 11, 2019 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 DbNinja 3.2.7 allows session fixation via the data.php sessid parameter.
CVE-2019-7545 1Dbninja 1Dbninja Jun 17, 2026 Feb 6, 2019 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting (XSS) vulnerability in the User Name field.