Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sirgod vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2008-3926
Multiple directory traversal vulnerabilities in Content Management Made Easy (CMME) 1.12 allow remote malicious users to (1) read arbitrary files via a .. (dot dot) in the env parameter in a weblog action to index.php, or (2) create arbitrary directories via a .. (dot dot) in the...
Hans Oesterholt Cmme 1.12
1 EDB exploit
NA
CVE-2009-1024
Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote malicious users to execute arbitrary SQL commands via the linkid parameter to edlink.php, and unspecified other vectors.
Beerwin Phplinkadmin 1.0
1 EDB exploit
NA
CVE-2009-1025
PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote malicious users to execute arbitrary PHP code via a URL in the page parameter.
Beerwin Phplinkadmin 1.0
1 EDB exploit
NA
CVE-2009-2124
Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the id parameter.
Elvinbts Elvinbts 1.2.0
1 EDB exploit
NA
CVE-2008-3859
Davlin Thickbox Gallery 2 allows remote malicious users to obtain the administrative username and MD5 password hash via a direct request to conf/admins.php.
Davlin Thickbox Gallery 2
1 EDB exploit
NA
CVE-2009-1607
Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote malicious users to inject arbitrary web script or HTML via the username in a registration, which is not properly handled when the administrator accesses the Users menu.
Linkbase Linkbase 2.0
1 EDB exploit
NA
CVE-2009-1625
Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the ln parameter.
Davlin Thickbox Gallery 2
1 EDB exploit
NA
CVE-2009-1817
Multiple buffer overflows in DigiMode Maya 1.0.2 allow remote malicious users to execute arbitrary code via a long string in a malformed (1) .m3u or (2) .m3l playlist file.
Digimode10 Maya 1.0.2
1 EDB exploit
NA
CVE-2009-1951
Cross-site scripting (XSS) vulnerability in index.php in PropertyMax Pro FREE 0.3 allows remote malicious users to inject arbitrary web script or HTML via the pl parameter in a mi action.
Propertymaxpro Propertymax Pro Free 0.3
1 EDB exploit
NA
CVE-2009-0383
delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote malicious users to delete arbitrary blog posts via a direct request.
Mzbservices Max.blog 1.0.6
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925
CVE-2023-41826
LFI
CVE-2022-22364
CVE-2024-2887
command injection
remote code execution
CVE-2024-34446
CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »