CVE-2009-4675
Published Mar 5, 2010admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative authentication, which allows remote attackers to change th…
Vendor archive
mole-group CVEs
Beta · best-effort7 CVEs tagged to vendor mole-group — 0 Critical, 5 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2009-4674
Published Mar 5, 2010admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified user_id field.
CVE-2009-4673
Published Mar 5, 2010SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the user_id parameter.
CVE-2008-6818
Published Jun 1, 2009Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of thi…
CVE-2008-6817
Published Jun 1, 2009Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this…
CVE-2008-6484
Published Mar 18, 2009SQL injection vulnerability in login.php in Mole Group Taxi Map Script (aka Taxi Calc Dist Script) allows remote attackers to execute arbitrary SQL commands via the user field.
CVE-2008-6225
Published Feb 20, 2009SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter. NOTE: the ven…
Showing 1-7 of 7 CVEsPage 1 of 1