Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
bugreport.ir vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2007-6500
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and previous versions allows remote authenticated users to delete "gateway information" via a request to OpenApi/GatewayVariables.asp.
Hosting Controller Hosting Controller
1 EDB exploit
NA
CVE-2007-6502
Hosting Controller 6.1 Hot fix 3.3 and previous versions allows remote authenticated users to obtain sensitive information via (1) the AdminName and AdminLevel parameters to fp2000/NEWSRVR.asp, which discloses usernames; and (2) certain XML HTTP requests to hosting/css.asp using ...
Hosting Controller Hosting Controller
1 EDB exploit
NA
CVE-2007-6503
Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and previous versions allow remote authenticated users to (1) import an arbitrary plan via a request to hosting/importhostingplans.asp; or (2) change an arbitrary plan via a request to hosting/AutoSignUpPl...
Hosting Controller Hosting Controller
1 EDB exploit
NA
CVE-2007-6504
Unspecified vulnerability in IIS/iibind.asp in Hosting Controller 6.1 Hot fix 3.3 and previous versions allows remote authenticated users to change the headers of arbitrary hosts via an unspecified parameter.
Hosting Controller Hosting Controller
1 EDB exploit
NA
CVE-2008-6675
Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote malicious users to inject arbitrary web script or HTML via (1) the close parameter to showThumb.aspx; (2) SB_redirect and (3) SB_feedback parameters in process_send.asp, as reachable through def...
Quickersite Quickersite 1.8.5
1 EDB exploit
NA
CVE-2008-6677
Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5 allows remote malicious users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.
Quickersite Quickersite 1.8.5
1 EDB exploit
NA
CVE-2008-2680
Multiple cross-site scripting (XSS) vulnerabilities in _db/compact.asp in Realm CMS 2.3 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) CmpctedDB and (2) Boyut parameters.
Realm Project Realm Cms
1 EDB exploit
NA
CVE-2008-2681
Realm CMS 2.3 and previous versions allows remote malicious users to obtain sensitive information via a direct request to _db/compact.asp, which reveals the database path in an error message.
Realm Project Realm Cms
1 EDB exploit
NA
CVE-2008-2842
Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the FILE parameter.
Doitlive Cms
1 EDB exploit
NA
CVE-2008-2843
Multiple SQL injection vulnerabilities in doITLive CMS 2.50 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) ID parameter in an USUB action to default.asp and the (2) Licence[SpecialLicenseNumber] (aka LicenceId) cookie to edit/defa...
Doitlive Cms
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120
CVE-2024-35921
CVE-2024-35874
brute force
CVE-2024-36080
unprivileged
CVE-2024-35917
IDOR
CVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »