Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
beyazkurt vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2007-1932
Directory traversal vulnerability in scarnews.inc.php in ScarNews 1.2.1 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the sn_admin_dir parameter.
Scar4u Scarnews 1.2.1
1 EDB exploit
NA
CVE-2007-2743
PHP remote file inclusion vulnerability in custom_vars.php in GlossWord 1.8.1 allows remote malicious users to execute arbitrary PHP code via a URL in the sys[path_addon] parameter.
Glossword Glossword 1.8.1
1 EDB exploit
NA
CVE-2008-6808
SQL injection vulnerability in links.php in Scripts for Sites (SFS) EZ Link Directory allows remote malicious users to execute arbitrary SQL commands via the cat_id parameter in a list action.
Scripts-for-sites Ez Link Directory
1 EDB exploit
NA
CVE-2008-7240
Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote malicious users to include and execute arbitrary local files via the template parameter.
Linuxwebshop Php User Base 1.3
1 EDB exploit
NA
CVE-2007-3236
PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote malicious users to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter.
Xoops Horoscope Module 1.0
1 EDB exploit
NA
CVE-2008-1042
Directory traversal vulnerability in include/body.inc.php in Linux Web Shop (LWS) php Download Manager 1.0 and 1.1 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the content parameter.
Linux Web Shop Php Download Manager
1 EDB exploit
NA
CVE-2008-6782
SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Hosting Directory allows remote malicious users to execute arbitrary SQL commands via the cat_id parameter in a list action.
Scripts-for-sites Ez Hosting Directory
1 EDB exploit
NA
CVE-2008-6783
SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote malicious users to execute arbitrary SQL commands via the cat_id parameter in a list action.
Scripts-for-sites Ez Home Business Directory
1 EDB exploit
NA
CVE-2008-6493
Easy Content Management Publishing stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download a database via a direct request for Database/News.mdb.
Easy-news Easy Content Management Publishing -
1 EDB exploit
NA
CVE-2008-5922
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS (CFAGCMS) 1 allow remote malicious users to execute arbitrary PHP code via a URL in the (1) main and (2) right parameters.
Cfagcms Cfagcms 1.0
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversal
CVE-2024-33545
CVE-2024-35725
CVE-2024-32704
overflow
file upload
CVE-2024-0230
CVE-2024-32705
CVE-2024-23692
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »