Vulnerabilities (CVE)

Filtered by vendor Duware Subscribe
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-2200 1 Duware 1 Duforum 2024-11-20 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to inject arbitrary web script or HTML via via the message text.
CVE-2004-2199 1 Duware 1 Duclassified 2024-11-20 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in DUware DUclassified 4.0 allows remote attackers to inject arbitrary web script or HTML via the message text.
CVE-2004-2198 1 Duware 1 Duclassmate 2024-11-20 6.4 MEDIUM N/A
account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the "My Account" page.