Plainblack maintains a focused web application product (WebGUI) with a narrowly scoped vulnerability profile centered on application-layer weaknesses. The recurring exposure is rooted in web input handling and request validation, manifesting as cross-site request forgery, code injection, and cross-site scripting vulnerabilities typical of server-side web frameworks. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Plainblack over time
Signals from CVEs in this vendor scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2005-4694HIGH Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6 allows attackers to execute arbitrary code via unknown attac | Dec 31, 2005 | 7.5 | 32 | NO | YES |
CVE-2008-2077HIGH Unspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors related to "data form list view." | May 5, 2008 | 10.0 | 25 | NO | NO |
CVE-2009-4877MEDIUM Multiple cross-site request forgery (CSRF) vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown | May 26, 2010 | 6.8 | 20 | NO | NO |
CVE-2005-2837HIGH Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via (1) Help.pm, (2) International.pm, or ( | Sep 7, 2005 | 7.5 | 19 | NO | NO |
CVE-2007-0407MEDIUM Cross-site scripting (XSS) vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 (beta) allows remote attackers to inject arbitrary web script or HTML via the usern | Jan 23, 2007 | 6.8 | 18 | NO | NO |
CVE-2007-0308MEDIUM Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.3.4 (beta) allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles. | Jan 18, 2007 | 6.8 | 18 | NO | NO |
CVE-2007-0629MEDIUM The www_purgeList method in Plain Black WebGUI before 7.3.8 does not properly check user permissions, which allows attackers to delete unauthorized assets. NOTE: some of these det | Jan 31, 2007 | 6.4 | 17 | NO | NO |
CVE-2006-0680MEDIUM Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous registration is disabled, via a certain URL. | Feb 15, 2006 | 5.0 | 16 | NO | NO |
CVE-2007-6487MEDIUM Unspecified vulnerability in Plain Black WebGUI 7.4.0 through 7.4.17 allows remote authenticated users with Secondary Admin privileges to create Admin accounts, a different vulnera | Dec 20, 2007 | 4.9 | 15 | NO | NO |
CVE-2015-1564MEDIUM Cross-site scripting (XSS) vulnerability in style-underground/search in Plain Black WebGUI 7.10.29 and earlier allows remote attackers to inject arbitrary web script or HTML via th | Feb 9, 2015 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (12 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Plainblack.
Media articles that mention a CVE ID that affects a product developed by Plainblack — matched by CVE ID, not by vendor name.