Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
php php 3.0.1 vulnerabilities and exploits
(subscribe to this query)
515
VMScore
CVE-2006-3793
PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the SD_DIR parameter.
Sitedepth Sitedepth Cms
1 EDB exploit
755
VMScore
CVE-2006-5402
Multiple PHP remote file inclusion vulnerabilities in PHPmybibli 3.0.1 and previous versions allow remote malicious users to execute arbitrary PHP code via a URL in the (1) class_path, (2) javascript_path, and (3) include_path parameters in (a) cart.php; the (4) class_path parame...
Phpmybibli Phpmybibli
1 EDB exploit
668
VMScore
CVE-2009-1285
Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x prior to 3.1.3.2 allows remote malicious users to inject arbitrary PHP code into configuration files.
Phpmyadmin Phpmyadmin 3.1.3
Phpmyadmin Phpmyadmin 3.1.2
Phpmyadmin Phpmyadmin 3.1.0
Phpmyadmin Phpmyadmin 3.0.0
Phpmyadmin Phpmyadmin 3.1.1
Phpmyadmin Phpmyadmin 3.0.1
Phpmyadmin Phpmyadmin 3.1.0.0
Phpmyadmin Phpmyadmin 3.1.3.1
760
VMScore
CVE-2005-0511
misc.php for vBulletin 3.0.6 and previous versions, when "Add Template Name in HTML Comments" is enabled, allows remote malicious users to execute arbitrary PHP code via nested variables in the template parameter.
Jelsoft Vbulletin 2.2.0
Jelsoft Vbulletin 3.0.4
Jelsoft Vbulletin 3.0.0 Rc4
Jelsoft Vbulletin 2.3.0
Jelsoft Vbulletin 3.0.1
Jelsoft Vbulletin 2.2.9 Can
Jelsoft Vbulletin 3.0.0 Beta 2
Jelsoft Vbulletin 3.0.6
Jelsoft Vbulletin 2.2.1
Jelsoft Vbulletin 2.0.2
Jelsoft Vbulletin 2.0
Jelsoft Vbulletin 2.0.1
Jelsoft Vbulletin 2.2.7
Jelsoft Vbulletin 3.0.0 Can4
Jelsoft Vbulletin 2.0 Beta 2
Jelsoft Vbulletin 2.2.4
Jelsoft Vbulletin 3.0 Beta 2
Jelsoft Vbulletin 2.2.2
Jelsoft Vbulletin 2.2.5
Jelsoft Vbulletin 2.0 Beta 3
Jelsoft Vbulletin 3.0.0
Jelsoft Vbulletin 2.2.6
2 EDB exploits
755
VMScore
CVE-2006-6041
Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions prior to 3.0.4, allow remote malicious users to execute arbitrary PHP code via a URL in the g_include parameter to (1) index.php, (2) module/forum/forum.p...
Laurent Van Den Reysen Work System E-commerce
1 EDB exploit
890
VMScore
CVE-2001-1011
index2.php in Mambo Site Server 3.0.0 up to and including 3.0.5 allows remote malicious users to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters.
Mambo Mambo Site Server 3.0.4
Mambo Mambo Site Server 3.0.3
Mambo Mambo Site Server 3.0
Mambo Mambo Site Server 3.0.5
Mambo Mambo Site Server 3.0.1
Mambo Mambo Site Server 3.0.2
605
VMScore
CVE-2012-4389
Incomplete blacklist vulnerability in lib/migrate.php in ownCloud prior to 4.0.7 allows remote malicious users to execute arbitrary code by uploading a crafted .htaccess file in an import.zip file and accessing an uploaded PHP file.
Owncloud Owncloud 4.0.3
Owncloud Owncloud 4.0.0
Owncloud Owncloud 3.0.3
Owncloud Owncloud
Owncloud Owncloud 4.0.1
Owncloud Owncloud 4.0.5
Owncloud Owncloud 4.0.2
Owncloud Owncloud 3.0.0
Owncloud Owncloud 3.0.2
Owncloud Owncloud 4.0.4
Owncloud Owncloud 3.0.1
578
VMScore
CVE-2012-5610
Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud prior to 4.0.9 and 4.5.x prior to 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a special crafted name.
Owncloud Owncloud 4.0.3
Owncloud Owncloud 4.0.0
Owncloud Owncloud 3.0.3
Owncloud Owncloud
Owncloud Owncloud 4.0.1
Owncloud Owncloud 4.0.6
Owncloud Owncloud 4.0.5
Owncloud Owncloud 4.0.2
Owncloud Owncloud 3.0.0
Owncloud Owncloud 3.0.2
Owncloud Owncloud 4.0.7
Owncloud Owncloud 4.0.4
Owncloud Owncloud 3.0.1
755
VMScore
CVE-2004-1515
SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote malicious users to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php.
Jelsoft Vbulletin 3.0.4
Jelsoft Vbulletin 3.0.0 Rc4
Jelsoft Vbulletin 3.0.1
Jelsoft Vbulletin 3.0.0 Beta 2
Jelsoft Vbulletin 3.0.6
Jelsoft Vbulletin 3.0.0 Can4
Jelsoft Vbulletin 3.0 Beta 2
Jelsoft Vbulletin 3.0.0
Jelsoft Vbulletin 3.0.2
Jelsoft Vbulletin 3.0.3
Jelsoft Vbulletin 3.0.5
1 EDB exploit
668
VMScore
CVE-2013-4557
The Security Screen (_core_/securite/ecran_securite.php) prior to 1.1.8 for SPIP, as used in SPIP 3.0.x prior to 3.0.12, allows remote malicious users to execute arbitrary PHP via the connect parameter.
Spip Spip 3.0.3
Spip Spip 3.0.8
Spip Spip 3.0.4
Spip Spip 3.0.7
Spip Spip 3.0.5
Spip Spip 3.0.10
Spip Spip 3.0.9
Spip Spip 3.0.2
Spip Spip 3.0.0
Spip Spip 3.0.6
Spip Spip 3.0.11
Spip Spip 3.0.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
5
6
7
8
9
10
NEXT »