Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

all in one control panel all in one control panel vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2007-0365
Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.009 and previous versions allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably a different vulnerability than CVE-2006-5830.
Nicola Asuni All In One Control Panel 1.3.000Nicola Asuni All In One Control Panel 1.3.007Nicola Asuni All In One Control Panel 1.3.008Nicola Asuni All In One Control Panel 1.3.003Nicola Asuni All In One Control Panel 1.3.004Nicola Asuni All In One Control Panel 1.3.005Nicola Asuni All In One Control Panel 1.3.006Nicola Asuni All In One Control Panel 1.3.001Nicola Asuni All In One Control Panel 1.3.002Nicola Asuni All In One Control Panel
7.5
CVSSv2
CVE-2007-0223
SQL injection vulnerability in shared/code/cp_functions_downloads.php in Nicola Asuni All In One Control Panel (AIOCP) prior to 1.3.009 allows remote malicious users to execute arbitrary SQL commands via the download_category parameter.
Nicola Asuni All In One Control Panel 1.3.000Nicola Asuni All In One Control Panel 1.3.001Nicola Asuni All In One Control Panel 1.3.002Nicola Asuni All In One Control Panel 1.3.003Nicola Asuni All In One Control Panel 1.3.004Nicola Asuni All In One Control Panel 1.3.005Nicola Asuni All In One Control Panel 1.3.006Nicola Asuni All In One Control Panel 1.3.007Nicola Asuni All In One Control Panel 1.3.008
7.5
CVSSv2
CVE-2007-0316
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.010 and previous versions, when magic_quotes_gpc is disabled, allow remote malicious users to execute arbitrary SQL commands via the (1) xuser_name parameter to shared/code/cp_authorization.php, and th...
All In One Control Panel All In One Control Panel
7.5
CVSSv2
CVE-2008-4782
SQL injection vulnerability in public/code/cp_polls_results.php in All In One Control Panel (AIOCP) 1.4 allows remote malicious users to execute arbitrary SQL commands via the poll_id parameter.
Aiocp Aiocp 1.4.001Aiocp Aiocp 1.4.000
9
CVSSv2
CVE-2020-0688
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.
Microsoft Exchange Server 2013Microsoft Exchange Server 2016Microsoft Exchange Server 2019Microsoft Exchange Server 2010
7.5
CVSSv2
CVE-2009-3220
PHP remote file inclusion vulnerability in cp_html2txt.php in All In One Control Panel (AIOCP) 1.4.001 allows remote malicious users to execute arbitrary PHP code via a URL in the page parameter.
Tecnick Aiocp 1.4.001
7.5
CVSSv2
CVE-2006-5831
PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the load_page parameter.
Aiocp Aiocp 1.3.007Aiocp Aiocp 1.3.003Aiocp Aiocp 1.3.004Aiocp Aiocp 1.3.000Aiocp Aiocp 1.3.001Aiocp Aiocp 1.3.002Aiocp Aiocp 1.3.005Aiocp Aiocp 1.3.006
7.5
CVSSv2
CVE-2009-4747
PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.001 allows remote malicious users to execute arbitrary PHP code via a URL in the page parameter, a different vector than CVE-2009-3220.
Tecnick Aiocp 1.4.001
4.3
CVSSv2
CVE-2007-3120
Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) prior to 1.3.017 allows remote malicious users to inject arbitrary web script or HTML via the aiocp_dp parameter. NOTE: some of these details are obtained from third party inf...
Aiocp Aiocp 1.3.003Aiocp Aiocp 1.3.004Aiocp Aiocp 1.3.011Aiocp Aiocp 1.3.012Aiocp Aiocp 1.3.013Aiocp Aiocp 1.3.001Aiocp Aiocp 1.3.002Aiocp Aiocp 1.3.009Aiocp Aiocp 1.3.010Aiocp Aiocp 1.3.005Aiocp Aiocp 1.3.006Aiocp Aiocp 1.3.014Aiocp Aiocp 1.3.015Aiocp Aiocp 1.3.000Aiocp Aiocp 1.3.007Aiocp Aiocp 1.3.008Aiocp Aiocp 1.3.016Aiocp Aiocp 1.3.017
6.8
CVSSv2
CVE-2007-2625
Cross-site scripting (XSS) vulnerability in shared/code/cp_authorization.php in All In One Control Panel (AIOCP) prior to 1.3.016 allows remote malicious users to inject arbitrary web script or HTML via unspecified parameters. NOTE: some of these details are obtained from third p...
Aiocp Aiocp
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946CVE-2024-30309CVE-2024-4761CVE-2024-30051type confusionmemory leakCVE-2024-30293reflected XSSCVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook