Sqlitemanager : Security Vulnerabilities, CVEs,
SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. NOTE: This product is discontinued.
Max CVSS
9.8
EPSS Score
0.22%
Published
2019-03-21
Updated
2019-03-25
Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary web script or HTML via the dbsel parameter to (1) main.php or (2) index.php; or (3) nsextt parameter to index.php.
Max CVSS
4.3
EPSS Score
0.75%
Published
2012-09-23
Updated
2017-08-29
Cross-site scripting (XSS) vulnerability in main.php in SQLiteManager 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter.
Max CVSS
4.3
EPSS Score
0.22%
Published
2010-01-04
Updated
2018-10-10
Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) database name, (2) table name, (3) ViewName, (4) view, (5) trigger, and (6) function fields in main.php and certain other files.
Max CVSS
4.3
EPSS Score
0.53%
Published
2007-03-03
Updated
2018-10-16
4 vulnerabilities found