Merlix

merlix

4 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Teamworx Server

teamworx_server

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-6871 1Merlix 1Educate Server Apr 23, 2026 Jul 23, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Merlix Educate Server stores db.mdb under the web root with insufficient access control, which allows remote attackers to obtain unspecified sensitive information via a direct request.
CVE-2008-6870 1Merlix 1Educate Server Apr 23, 2026 Jul 23, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information via a direct request to (1) config.asp and (2) users.asp.
CVE-2008-5600 1Merlix 1Teamworx Server Apr 23, 2026 Dec 16, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for teamworx.mdb.
CVE-2008-5599 1Merlix 1Teamworx Server Apr 23, 2026 Dec 16, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the password parameter (aka passwd field) in a login action. NOTE: some of these details...Show more SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the password parameter (aka passwd field) in a login action. NOTE: some of these details are obtained from third party information.Show less