Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
d3v1l vulnerabilities and exploits
(subscribe to this query)
510
VMScore
CVE-2008-6222
Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 for Joomla! allows remote malicious users to read arbitrary files via a .. (dot dot) in the include_file parameter to index.php.
Joomlashowroom Pro Desk Support Center 1.0
Joomlashowroom Pro Desk Support Center 1.2
2 EDB exploits
755
VMScore
CVE-2007-6376
Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the filename parameter, a different vector than CVE-2006-4190. NOTE: the provenance of this informati...
Francisco Burzi Php-nuke 8.0 Final
1 EDB exploit
755
VMScore
CVE-2007-3811
Multiple SQL injection vulnerabilities in eSyndiCat allow remote malicious users to execute arbitrary SQL commands via (1) the id parameter to news.php or (2) the name parameter to page.php.
Esyndicat Esyndicat Directory 1.6
1 EDB exploit
435
VMScore
CVE-2008-4336
Cross-site scripting (XSS) vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote malicious users to inject arbitrary web script or HTML via the apa_album_ID parameter.
Constantin Charissis Atomic Photo Album 1.1.0 Pre4
1 EDB exploit
755
VMScore
CVE-2010-2674
SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote malicious users to execute arbitrary SQL commands via the id parameter in an articolo action.
Alanzard Tsoka Cms
1 EDB exploit
435
VMScore
CVE-2010-2675
Cross-site scripting (XSS) vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote malicious users to inject arbitrary web script or HTML via the id parameter in an articolo action.
Alanzard Tsoka Cms
1 EDB exploit
755
VMScore
CVE-2008-6028
SQL injection vulnerability in list.php in University of Queensland Library Fez 1.3 and 2.0 RC1 allows remote malicious users to execute arbitrary SQL commands via the parent_id parameter in a subject action.
University Of Queensland Fez 1.3
University Of Queensland Fez 2.0
1 EDB exploit
755
VMScore
CVE-2008-6031
SQL injection vulnerability in vote.php in WSN Links 2.22 and 2.23 allows remote malicious users to execute arbitrary SQL commands via the id parameter. NOTE: it was later reported that 2.34 is also vulnerable.
Wsn Links Wsn Links 2.22
Wsn Links Wsn Links 2.23
1 EDB exploit
755
VMScore
CVE-2008-6033
SQL injection vulnerability in comments.php in WSN Links 2.20 allows remote malicious users to execute arbitrary SQL commands via the id parameter.
Wsn Links Wsn Links 2.20
1 EDB exploit
755
VMScore
CVE-2008-6179
SQL injection vulnerability in sug_cat.php in IndexScript 3.0 allows remote malicious users to execute arbitrary SQL commands via the parent_id parameter, a different vector than CVE-2007-4069.
Indexscript Indexscript 3.0
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23692
CVE-2012-1823
memory leak
CVE-2024-0627
CVE-2024-31402
privilege escalation
CVE-2024-36418
remote code execution
CVE-2024-27844
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »