Preproject

preproject

8 CVEs • 6 products

Products (6)

Click to collapse

Toggle

Pre Multi Vendor Shopping Malls

pre_multi-vendor_shopping_malls

Pre Asp Job Board

pre_asp_job_board

Pre Survey Poll

pre_survey_poll

Php Auto Listings Script

php_auto_listings_script

Pre Podcast Portal

pre_podcast_portal

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-4959 1Preproject 1Pre Podcast Portal Apr 29, 2026 Oct 9, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the password parameter.
CVE-2008-6847 1Preproject 1Pre Asp Job Board Apr 23, 2026 Jul 2, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Employee/emp_login.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
CVE-2008-6329 1Preproject 1Pre Asp Job Board Apr 23, 2026 Feb 27, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password parameters, as reachable from Employee/emp_login.asp....Show more SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password parameters, as reachable from Employee/emp_login.asp. NOTE: some of these details are obtained from third party information.Show less
CVE-2008-6228 1Preproject 1Pre Multi Vendor Shopping Malls Apr 23, 2026 Feb 20, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".
CVE-2008-6227 1Preproject 1Pre Multi Vendor Shopping Malls Apr 23, 2026 Feb 20, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in buyer_detail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the (1) sid and (2) cid parameters.
CVE-2008-6226 1Preproject 1Php Auto Listings Script Apr 23, 2026 Feb 20, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the itemno parameter.
CVE-2008-5058 1Preproject 1Pre Simple Cms Apr 23, 2026 Nov 13, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary SQL commands via the user parameter, as reachable from siteadmin/adminlogin.php. NOTE: some of thes...Show more SQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary SQL commands via the user parameter, as reachable from siteadmin/adminlogin.php. NOTE: some of these details are obtained from third party information.Show less
CVE-2008-3310 1Preproject 1Pre Survey Poll Apr 23, 2026 Jul 25, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid parameter.