Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor The Everything Development Company Subscribe
Filtered by product The Everything Development Engine
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-0675 1 The Everything Development Company 1 The Everything Development Engine 2018-10-15 7.5 HIGH N/A
SQL injection vulnerability in cms/index.pl in The Everything Development Engine in The Everything Development System Pre-1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the node_id parameter.
CVE-2008-0724 1 The Everything Development Company 1 The Everything Development Engine 2018-10-15 5.0 MEDIUM N/A
The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartext in a database, which makes it easier for context-dependent attackers to obtain access to user accounts.