Endonesia operates a modestly represented portfolio centered on a calendar management platform that punches above its volume in the vulnerability landscape. The vendor's disclosure history is characterized by recurrent SQL-injection vulnerabilities and input-handling weaknesses that frequently acquire public exploit code, reflecting the exposure inherent to web-facing applications. Live severity, exploitation, and current exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Endonesia over time
Signals from CVEs in this vendor scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2003-1317MEDIUM Cross-site scripting (XSS) vulnerability in mod.php in eNdonesia 8.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter. NOTE: The provenance of | Dec 31, 2003 | 6.8 | 33 | NO | YES |
CVE-2010-3461HIGH SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printarticle action to m | Sep 17, 2010 | 7.5 | 31 | NO | YES |
CVE-2007-3394HIGH Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via the (1) artid parameter to mod.php in a viewarticle action (pub | Jun 26, 2007 | 7.5 | 31 | NO | YES |
CVE-2006-6873HIGH Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via (1) the did parameter in a (a) viewdisk operation (d | Dec 31, 2006 | 7.5 | 28 | NO | YES |
CVE-2006-6871MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter in a viewlink operation | Dec 31, 2006 | 6.8 | 27 | NO | YES |
CVE-2004-2670MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter in a viewcat | Dec 31, 2004 | 6.8 | 27 | NO | YES |
CVE-2023-31753CRITICAL SQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker to execute arbitrary SQL commands via the "rid=" parameter. | Jul 20, 2023 | 9.8 | 26 | NO | NO |
CVE-2008-3452MEDIUM SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the loc_id parameter in a list_events action to mo | Aug 4, 2008 | 6.8 | 26 | NO | YES |
CVE-2006-6872MEDIUM Directory traversal vulnerability in mod.php in eNdonesia 8.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the mod parameter. | Dec 31, 2006 | 5.0 | 23 | NO | YES |
CVE-2006-6874MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in friend.php in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Message or (2) Your Nam | Dec 31, 2006 | 6.8 | 18 | NO | NO |
Signals from CVEs in this vendor scope (12 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Endonesia.
Media articles that mention a CVE ID that affects a product developed by Endonesia — matched by CVE ID, not by vendor name.