Mole Group

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-4675 1Mole Group 1Gastro Portal (restaurant Directory) Script Apr 29, 2026 Mar 5, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form...Show more admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission.Show less
CVE-2009-4674 1Mole Group 2Bus Ticket Script Sky Hunter Airline Ticket Sale Script Apr 29, 2026 Mar 5, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified user_id field.
CVE-2009-4673 1Mole Group 1Adult Portal Script Apr 29, 2026 Mar 5, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the user_id parameter.
CVE-2008-6818 1Mole Group 1Real Estate Script Apr 23, 2026 Jun 1, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are...Show more Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less
CVE-2008-6817 1Mole Group 1Lastminute Script Apr 23, 2026 Jun 1, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are...Show more Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less
CVE-2008-6484 1Mole Group 1Taxi Calc Dist Script Apr 23, 2026 Mar 18, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in login.php in Mole Group Taxi Map Script (aka Taxi Calc Dist Script) allows remote attackers to execute arbitrary SQL commands via the user field.
CVE-2008-6225 1Mole Group 1Airline Ticket Sale Script Apr 23, 2026 Feb 20, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter. NOTE: the vendor has disputed this issue, stating "cra...Show more SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter. NOTE: the vendor has disputed this issue, stating "crazy hackers and so named Security companies [spread] out such false informations. Such scripts or versions [do not] exist.Show less
CVE-2008-5047 1Mole Group 1Rental Script Apr 23, 2026 Nov 13, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVE-2008-5046 1Mole Group 1Pizza Script Apr 23, 2026 Nov 13, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL commands via the manufacturers_id parameter.
CVE-2008-3125 1Mole Group 1Lastminute Script Apr 23, 2026 Jul 10, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVE-2008-3124 1Mole Group 1Hotel Script Apr 23, 2026 Jul 10, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in index.php in Mole Group Hotel Script 1.0 allows remote attackers to execute arbitrary SQL commands via the file parameter.
CVE-2008-3123 1Mole Group 1Real Estate Script Apr 23, 2026 Jul 10, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in index.php in Mole Group Real Estate Script 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the listing_id parameter in a listings action.