CJ » Ultra Plus : Security Vulnerabilities, CVEs,
SQL injection vulnerability in out.php in CJ Ultra (CJUltra) Plus 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via the perm parameter.
Max CVSS
7.5
EPSS Score
0.45%
Published
2005-05-11
Updated
2016-10-18
SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie.
Max CVSS
7.5
EPSS Score
0.14%
Published
2008-09-25
Updated
2017-09-29
2 vulnerabilities found