← Back

Duware

duware

22 CVEs • 18 products

Products (18)

Click to collapse
Toggle
Duclassified
duclassified
5 CVEs
Dupaypal
dupaypal
4 CVEs
Duclassmate
duclassmate
3 CVEs
Duforum
duforum
3 CVEs
Dupaypal Pro
dupaypal_pro
3 CVEs
Dudirectory
dudirectory
3 CVEs
Dudownload
dudownload
3 CVEs
Dugallery
dugallery
3 CVEs
Dunews
dunews
3 CVEs
Duportal
duportal
2 CVEs
Duamazon
duamazon
2 CVEs
Duarticle
duarticle
2 CVEs
Dudirectory Pro
dudirectory_pro
2 CVEs
Dudirectory Pro Sql
dudirectory_pro_sql
2 CVEs
Duportal Pro
duportal_pro
1 CVE
Duamazon Pro
duamazon_pro
1 CVE
Dupoll
dupoll
1 CVE
Ducalendar
ducalendar
1 CVE

CVEs (22)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2004-2199
1Duware
1Duclassified
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in DUware DUclassified 4.0 allows remote attackers to inject arbitrary web script or HTML via the message text.
CVE-2004-2198
1Duware
1Duclassmate
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
6.4 MEDIUM· v2
account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the "My Account" page.