Greensql

greensql

5 CVEs • 3 products

Products (3)

Click to collapse

Toggle

Greensql Console

greensql-console

Greensql Firewall

greensql_firewall

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-7229 1Greensql 1Greensql Firewall Apr 23, 2026 Sep 14, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 GreenSQL Firewall (greensql-fw) before 0.9.2 allows remote attackers to bypass SQL injection protection via a crafted string, possibly involving an encoded space character (%20).
CVE-2008-6992 1Greensql 1Greensql Firewall Apr 23, 2026 Aug 19, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully...Show more GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL.Show less
CVE-2008-6417 1Greensql 1Greensql Console Apr 23, 2026 Mar 6, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in GreenSQL-Console before 0.3.5 allows attackers to obtain the "installation directory" via unknown vectors.
CVE-2008-6416 1Greensql 1Greensql Console Apr 23, 2026 Mar 6, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL-Console before 0.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "internal pages."
CVE-2007-5059 1Greensql 1Greensql Apr 23, 2026 Sep 24, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script or HTML via several vectors, as demonstrated by the (1) uname and (2) pass parameters in a login form,...Show more Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script or HTML via several vectors, as demonstrated by the (1) uname and (2) pass parameters in a login form, and (3) an unspecified "url value," leading to storage of XSS sequences in the database and display of these sequences in the alert section of the admin panel.Show less