CVE Tools
Track your stack

Citrusdb

5 CVEs tracked since 2005. Since Feb 2005, none of them reached CISA KEV.

Citrusdb CVEs per month

Feb 2005 to Feb 2005. Point at a month, or focus the strip and use the arrow keys.
Citrusdb CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2005-0250

Products

The products that kept showing up in Citrusdb's monthly top three, with their CVEs summed over those months.

  1. Citrusdb41 month
  2. Citrusdb Customer Database11 month

Latest CVEs

The 5 most recently published vulnerabilities affecting Citrusdb.

  1. CVE-2005-0411Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary PHP files via .. (dot dot) sequences in the load parameter.7.5
  2. CVE-2005-0408CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to bypass authentication and gain privileges by calculating...9.8
  3. CVE-2005-0409CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information suc...6.4
  4. CVE-2005-0410SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV file.5.0
  5. CVE-2005-0229CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt.5.0

The record

Peak rank
#30 in Feb 2005
Busiest month shown
Feb 2005, 5 CVEs
Months with a KEV entry
0 since Feb 2005
Monthly snapshots
1 since 2005
Citrusdb's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store