Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
r0t vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2009-2216
Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the URI in a view=advanced request.
Jbmc-software Directadmin
Jbmc-software Directadmin 1.33.2
Jbmc-software Directadmin 1.33.1
Jbmc-software Directadmin 1.292
Jbmc-software Directadmin 1.33.4
Jbmc-software Directadmin 1.33.3
1 EDB exploit
NA
CVE-2007-4264
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) 1.5.2 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) path and (2) download parameters.
Kai Blankenhorn Bitfolge Simple And Nice Index File
1 EDB exploit
NA
CVE-2007-4178
Cross-site scripting (XSS) vulnerability in index.php in WebDirector 2.2 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the deslocal parameter.
Amg Soft Webdirector
1 EDB exploit
NA
CVE-2007-3346
Directory traversal vulnerability in index.php in PHPAccounts 0.5 allows remote malicious users to include arbitrary local files via unspecified manipulations of the page parameter.
Php Accounts Php Accounts 0.5
1 EDB exploit
NA
CVE-2007-2808
Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote malicious users to inject arbitrary web script or HTML via the database parameter.
Gnu Gnats 4.1.99
Yngve Svendsen Gnatsweb 4.00
NA
CVE-2007-2805
Multiple cross-site scripting (XSS) vulnerabilities in index.php in ClientExec (CE) 3.0 beta2, and possibly other versions, allow remote malicious users to inject arbitrary web script or HTML via the (1) ticketID, (2) view, and (3) fuse parameters.
Clientexec Clientexec
1 EDB exploit
NA
CVE-2006-3776
PHP remote file inclusion vulnerability in order/index.php in IDevSpot (1) PhpHostBot 1.0 and (2) AutoHost 3.0 allows remote malicious users to execute arbitrary PHP code via a URL in the page parameter.
Idevspot Autohost 3.0
Idevspot Phphostbot 1.0
1 EDB exploit
NA
CVE-2006-3777
PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote malicious users to execute arbitrary PHP code via a URL in the page parameter.
Idevspot Phplinkexchange 1.0
1 EDB exploit
NA
CVE-2006-3682
awstats.pl in AWStats 6.5 build 1.857 and previous versions allows remote malicious users to obtain the installation path via the (1) year, (2) pluginmode or (3) month parameters.
Awstats Awstats
1 EDB exploit
NA
CVE-2006-3245
Multiple cross-site scripting (XSS) vulnerabilities in activatemember in mvnForum 1.0 GA and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) member and (2) activatecode parameters.
Mvnforum Mvnforum 1.0.0 Beta3
Mvnforum Mvnforum 1.0.0 Rc1
Mvnforum Mvnforum 1.0.0 Rc4
Mvnforum Mvnforum 1.0.0 Rc4 04
Mvnforum Mvnforum 1.0.0 Rc2
Mvnforum Mvnforum 1.0.0 Rc3 01
Mvnforum Mvnforum 1.0.0 Beta1
Mvnforum Mvnforum 1.0.0 Beta2
Mvnforum Mvnforum 1.0 Ga
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »