Uiga develops a suite of web-based portal and proxy products spanning fan communities, business operations, and institutional use, with a modest but prominent discrepures concentrated in application-layer input-handling failures. The vendor's vulnerabilities recur through SQL injection, cross-site scripting, and code injection weaknesses characteristic of web applications where user-supplied data reaches code execution or database query contexts, and the disclosure profile shows a strong pattern of public exploit availability. Current exploitation activity, severity breakdowns, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Uiga over time
Signals from CVEs in this vendor scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2012-4055HIGH SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter. | Jul 25, 2012 | 7.5 | 30 | NO | YES |
CVE-2010-1366HIGH Multiple SQL injection vulnerabilities in admin/admin_login.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) admin_name and | Apr 13, 2010 | 7.5 | 29 | NO | YES |
CVE-2010-1364HIGH SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to execute arbitrary SQL commands via the id parameter in a pho | Apr 13, 2010 | 7.5 | 29 | NO | YES |
CVE-2009-3081HIGH SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the month parameter in a calendar action. NOTE: the pr | Sep 4, 2009 | 7.5 | 29 | NO | YES |
CVE-2010-1365HIGH SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos act | Apr 13, 2010 | 7.5 | 28 | NO | YES |
CVE-2010-1049HIGH Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute arbitrary SQL commands via the (1) noentryid parameter to blog/index.php and the (2 | Mar 23, 2010 | 7.5 | 28 | NO | YES |
CVE-2009-3116HIGH SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the year parameter in a calendar action. | Sep 9, 2009 | 7.5 | 28 | NO | YES |
CVE-2010-1528MEDIUM PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in | Apr 26, 2010 | 6.8 | 27 | NO | YES |
CVE-2012-4056HIGH SQL injection vulnerability in index2.php in Uiga Personal Portal allows remote attackers to execute arbitrary SQL commands via the p parameter. | Jul 25, 2012 | 7.5 | 22 | NO | NO |
CVE-2010-1048MEDIUM Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter (aka | Mar 23, 2010 | 4.3 | 22 | NO | YES |
Signals from CVEs in this vendor scope (11 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Uiga.
Media articles that mention a CVE ID that affects a product developed by Uiga — matched by CVE ID, not by vendor name.