zoneo-soft vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in func.inc.php in ZoneO-Soft freeForum prior to 1.2.1 allows remote malicious users to inject arbitrary web script or HTML via the (1) name and (2) subject parameters.

Zoneo-soft Freeforum 1.1.1 Zoneo-soft Freeforum 1.0.1 Zoneo-soft Freeforum 1.1 Zoneo-soft Freeforum 1.1.2 Zoneo-soft Freeforum 1.2 Zoneo-soft Freeforum 1.0

7.5

CVSSv2

Direct static code injection vulnerability in func.inc.php in ZoneO-Soft freeForum prior to 1.2.1 allows remote malicious users to execute arbitrary PHP code via the (1) X-Forwarded-For and (2) Client-Ip HTTP headers, which are stored in Data/flood.db.php.

Zoneo-soft Freeforum 1.1 Zoneo-soft Freeforum 1.1.1 Zoneo-soft Freeforum 1.0 Zoneo-soft Freeforum 1.0.1 Zoneo-soft Freeforum 1.1.2 Zoneo-soft Freeforum 1.2

10

CVSSv2

The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and previous versions allows remote malicious users to bypass authentication and obtain administrative access by setting the username cookie to "traffic." NOTE: some of these details are obtained from thi...

Zoneo-soft Phptraffica 1.4.3 Zoneo-soft Phptraffica 1.4 Zoneo-soft Phptraffica 1.4.2

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in phpTrafficA prior to 1.2beta2 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors related to keywords results in the (1) main, (2) daily, (3) weekly, (4) monthly, (5) new trends, (6) in...

Zoneo-soft Phptraffica

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in Php/stats/statsRecent.inc.php in phpTrafficA 2.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the HTTP User-Agent header to index.php.

Zoneo-soft Phptraffica

5

CVSSv2

Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and previous versions allows remote malicious users to include arbitrary local files via the lang parameter, a different vector and version than CVE-2007-1076.2.

Zoneo-soft Phptraffica

1 EDB exploit

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the lang parameter.

Zoneo-soft Phptraffica

1 EDB exploit

7.5

CVSSv2

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and previous versions allows remote malicious users to execute arbitrary SQL commands via the pageid parameter in a stats action.

Zoneo-soft Phptraffica

1 EDB exploit

7.5

CVSSv2

Multiple unspecified vulnerabilities in phpTrafficA prior to 1.4.2 allow remote malicious users to have an unknown impact via the file parameter to (1) plotStatBar.php or (2) plotStatPie.php, different vectors than CVE-2007-1076.

Zoneo-soft Phptraffica

7.5

CVSSv2

SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and previous versions allows remote malicious users to execute arbitrary SQL commands via a User-Agent HTTP header.

Zoneo-soft Phptraffica

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook