Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
egix vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2018-2699
Vulnerability in the Application Express component of Oracle Database Server. The supported version that is affected is before 5.1.4.00.08. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Application Express. Successful ...
Oracle Application Express
NA
CVE-2014-3783
SQL injection vulnerability in admin/categories.php in Dotclear prior to 2.6.3 allows remote authenticated users with the manage categories permission to execute arbitrary SQL commands via the categories_order parameter.
Dotclear Dotclear 2.6
Dotclear Dotclear 2.5.3
Dotclear Dotclear 2.3.1
Dotclear Dotclear 2.3.0
Dotclear Dotclear 2.1.4
Dotclear Dotclear 2.1.3
Dotclear Dotclear 2.0
Dotclear Dotclear 1.2.8
Dotclear Dotclear 1.2.7
Dotclear Dotclear
Dotclear Dotclear 2.5.0
Dotclear Dotclear 2.4.4
Dotclear Dotclear 2.2.1
Dotclear Dotclear 2.2
Dotclear Dotclear 2.0.2
Dotclear Dotclear 2.0.1
Dotclear Dotclear 1.2.4
Dotclear Dotclear 1.2.3
Dotclear Dotclear 2.6.1
Dotclear Dotclear 2.4.3
Dotclear Dotclear 2.4.2
Dotclear Dotclear 2.1.7
9.8
CVSSv3
CVE-2023-46817
An issue exists in phpFox prior to 4.8.14. The url request parameter passed to the /core/redirect route is not properly sanitized before being used in a call to the unserialize() PHP function. This can be exploited by remote, unauthenticated malicious users to inject arbitrary PH...
Phpfox Phpfox
8.8
CVSSv3
CVE-2021-3025
Invision Community IPS Community Suite prior to 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the GETindex() method in applications/downloads/api/files.php).
Invisioncommunity Ips Community Suite
NA
CVE-2008-4687
manage_proj_page.php in Mantis prior to 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by create_function within the multi_sort function in core/utility_api.php.
Mantis Mantis 1.0.2
Mantis Mantis 1.0.1
Mantis Mantis 1.0.4
Mantis Mantis 1.0.3
Mantis Mantis 1.1.2
Mantis Mantis
Mantis Mantis 1.0.6
Mantis Mantis 1.0.5
Mantis Mantis 1.0.8
Mantis Mantis 1.1.1
Mantis Mantis 1.0.7
Mantis Mantis 0.19.4
Mantis Mantis 0.19.3
2 EDB exploits
2 Github repositories
9.8
CVSSv3
CVE-2013-3214
vtiger CRM 5.4.0 and previous versions contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.
Vtiger Vtiger Crm
2 EDB exploits
1 Github repository
7.2
CVSSv3
CVE-2020-8801
SuiteCRM up to and including 7.11.11 allows PHAR Deserialization.
Salesagility Suitecrm
9.8
CVSSv3
CVE-2020-8803
SuiteCRM up to and including 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via add_to_prospect_list.
Salesagility Suitecrm
6.5
CVSSv3
CVE-2020-8804
SuiteCRM up to and including 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module.
Salesagility Suitecrm
9.8
CVSSv3
CVE-2020-13380
openSIS prior to 7.4 allows SQL Injection.
Os4ed Opensis
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
SSRF
buffer overflow
CVE-2023-28952
CVE-2023-41822
CVE-2024-27956
CVE-2023-7028
CVE-2024-34447
CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
5
6
7
8
9
10
NEXT »