Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2010-1371	Modificada	Media (4.3)	0.93%	—	Preprojects PRE Classified Listings ASP	13/4/2010	16/6/2026	Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to inject arbitrary web script or HTML via the address parameter.
CVE-2010-1370	Modificada	Alta (7.5)	1.1%	—	Preprojects PRE Classified Listings ASP	13/4/2010	16/6/2026	SQL injection vulnerability in detailad.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the siteid parameter.
CVE-2010-1369	Modificada	Alta (7.5)	0.97%	💥 Exploit	Preprojects PRE Classified Listings ASP	13/4/2010	16/6/2026	SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the email parameter.
CVE-2008-6888	Modificada	Media (4.3)	1.5%	💥 Exploit	Preprojects PRE Classified Listings	3/8/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings 1.0 allows remote attackers to inject arbitrary web script or HTML via the address parameter.
CVE-2008-6887	Modificada	Alta (7.5)	0.99%	💥 Exploit	Preprojects PRE Classified Listings	3/8/2009	16/6/2026	SQL injection vulnerability in detailad.asp in Pre Classified Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the siteid parameter.
CVE-2008-6231	Modificada	Alta (7.5)	2.9%	💥 Exploit	Preprojects PRE Classified Listings	20/2/2009	16/6/2026	Pre Classified Listing PHP allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".
CVE-2008-6055	Modificada	Media (5)	1.1%	—	Preprojects PRE Classified Listings	4/2/2009	16/6/2026	PreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request.