Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2010-4298 | 1 Dustincowell | 1 Free Simple Software | 2018-10-10 | 7.5 HIGH | N/A |
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloads_id parameter in a download_now action to index.php. | |||||
CVE-2010-4311 | 1 Dustincowell | 1 Free Simple Software | 2018-10-10 | 5.0 MEDIUM | N/A |
Free Simple Software 1.0 stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. |