Simplecustomer Simple Customer — known CVE vulnerabilities

Every CVE whose affected-product data names Simplecustomer Simple Customer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2008-6081 — CVSS 7.5 (high): SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2008-6326 — CVSS 7.5 (high): SQL injection vulnerability in login.php in Simple Customer as downloaded on 20081118 allows remote attackers to execute arbitrary SQL…
• CVE-2008-6332 — CVSS 7.5 (high): SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password…
• CVE-2009-1637 — CVSS 6.4 (medium): profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail…