Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
rgod vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2005-4213
SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote malicious users to execute arbitrary SQL commands via the phpcoinsessid cookie.
Coinsoft Technologies Phpcoin 1.2.2
1 EDB exploit
6.8
CVSSv2
CVE-2005-4317
Limbo CMS 1.0.4.2 and previous versions, with register_globals off, does not protect the $_SERVER variable from external modification, which allows remote malicious users to use the _SERVER[REMOTE_ADDR] parameter to (1) conduct cross-site scripting (XSS) attacks in the stats modu...
Limbo Cms Limbo Cms
1 EDB exploit
7.5
CVSSv2
CVE-2005-4468
PHP remote file include vulnerability in help_text_vars.php in PHPGedView 3.3.7 and previous versions allows remote malicious users to execute arbitrary code via a URL in the PGV_BASE_DIRECTORY parameter.
1 EDB exploit
7.5
CVSSv2
CVE-2006-0583
SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the ID parameter.
Clever Copy Clever Copy 1.0.0
Clever Copy Clever Copy 1.0.1
Clever Copy Clever Copy 1.0.2
Clever Copy Clever Copy 1.0.3
Clever Copy Clever Copy 2.0
Clever Copy Clever Copy 2.0a
Clever Copy Clever Copy 3.0
1 EDB exploit
6.4
CVSSv2
CVE-2006-0625
Directory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and previous versions allows remote malicious users to read or include arbitrary files via ".." sequences in the GLOBALS[type_urls] parameter, which could then be used to execute arbitrary code via resulta...
Spip Spip 1.8.2d
Spip Spip 1.8.2e
Spip Spip 1.8.2g
1 EDB exploit
7.5
CVSSv2
CVE-2006-4042
Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) title, (2) url, (3) excerpt, or (4) blog_name parameters.
Mywebland Mybloggie
1 EDB exploit
7.5
CVSSv2
CVE-2005-3926
Direct static code injection vulnerability in error.php in GuppY 4.5.9 and previous versions, when register_globals is disabled, allows remote malicious users to execute arbitrary PHP code via the _SERVER[REMOTE_ADDR] parameter, which is injected into a .inc script that is later ...
Guppy Guppy 4.5.9
Guppy Guppy 4.5
Guppy Guppy 4.5.3
Guppy Guppy 4.5.3a
Guppy Guppy 4.5.4
1 EDB exploit
5
CVSSv2
CVE-2005-3929
Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote malicious users to create directories and overwrite arbitrary files via ".." sequences in the module parameter to index.php.
Xaraya Xaraya 1.0 Rc3
Xaraya Xaraya 1.0 Rc4
Xaraya Xaraya 1.0 Rc1
Xaraya Xaraya 1.0 Rc2
1 EDB exploit
7.6
CVSSv2
CVE-2007-3536
Multiple buffer overflows in the AMX NetLinx VNC (AmxVnc) ActiveX control in AmxVnc.dll 1.0.13.0 allow remote malicious users to execute arbitrary code via long (1) Host, (2) Password, or (3) LogFile property values.
Amx Netlinx Vnc Activex Control 1.0.13.0
1 EDB exploit
7.5
CVSSv2
CVE-2006-1164
Nodez 4.6.1.1 and previous versions stores sensitive data in the list.gtdat file under the web document root with insufficient access control, which allows remote malicious users to obtain usernames and password hashes by directly accessing list.gtdat.
Nodez Nodez 4.6.1.1
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
camera
bypass
CVE-2024-3592
CVE-2024-37383
CVE-2024-24919
CVE-2024-27822
CVE-2024-36788
CVE-2024-36789
man-in-the-middle
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »