Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Internet Scout Project Subscribe
Filtered by product Scout Portal Toolkit
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-4195 2 Internet Scout, Internet Scout Project 2 Scout Portal Toolkit, Scout Portal Toolkit 2018-10-19 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the ParentId parameter in SPT--BrowseResources.php, (2) ResourceId parameter in SPT--FullRecord.php, (3) ResourceOffset parameter in SPT--Home.php, and (4) F_UserName and (5) F_Password in SPT--UserLogin.php. NOTE: it was later reported that vector 1 is also present in 1.4.0.
CVE-2006-3309 1 Internet Scout Project 1 Scout Portal Toolkit 2017-10-18 7.5 HIGH N/A
SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter.